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ON THE POSSIBLE IMAGES OF THE MOD i REPRESENTATIONS 
ASSOCIATED TO ELLIPTIC CURVES OVER Q 

DAVID J. ZYWINA 


Abstract. Consider a non-CM elliptic curve E defined over Q. For each prime £, there is a 
representation pE,t'- Gal(Q/Q) —>■ GL 2 (F^) that describes the Galois action on the ^-torsion points 
of E. A famous theorem of Serre says that pE,t is surjective for all large enough 1. We will 
describe all known, and conjecturally all, pairs {E,£) such that pE,e is not surjective. Together 
with another paper, this produces an algorithm that given an elliptic curve E/Q, outputs the set 
of such exceptional primes £ and describes all the groups PB,f(Gal(Q/Q)) up to conjugacy. Much 
of the paper is dedicated to computing various modular curves of genus 0 with their morphisms to 
the j-line. 


1. Possible images 

Consider an elliptic curve E defined over Q. For each prime let E[P\ be the Atorsion subgroup 
of E{Q), where Q is a fixed algebraic closure of Q. The group E[i] is a free F^-module of rank 2 and 
there is a natural action of the absolute Galois group GuIq := Gal(Q/Q) on E[i] which respects the 
group structure. After choosing a basis for E[i], this action can be expressed in terms of a Galois 
representation 

Pe,£- GuIq —)• GL2(F£); 

its image PE,^(GalQ) is uniquely determined up to conjugacy in GL 2 (F£). A renowned theorem of 
Serre [Ser72] says that pE/ is surjective for all but finitely many i when E is non-GM. 

In this paper, we shall describe all known (and conjecturally all) proper subgroups of GL 2 (F£) 
that occur as the image of such a representation pE,i- Applying our classification with earlier work, 
we will obtain an algorithm to determine the set S of primes i for which pE/ is not surjective and 
also compute p£;^£(GalQ) for each £ G S. 

Before stating our classification in §§1.1-1.7, let ns make some comments. We will consider each 
prime i separately. For simplicity, assume that the j-invariant G Q of E/Q is neither 0 nor 
1728. Our first step in determining /9_B,^(Gal(Q) is to compute the group 

G ■■= ±/?£;^£(GalQ), 

i.e., the group generated by —I and /3£;^£(Gal(Q). The benefit of studying G, up to conjugacy in 
GL 2 (F^), is that it does not change if E is replaced by a quadratic twist. Moreover, if E'/Q is a 
quadratic twist of E/Q, then after choosing appropriate bases, we will have Pe',i = X'PE,e for some 
quadratic character Gal^ ^ Since Je ^ {0,1728}, all twists of E are quadratic twists 

and hence G, up to conjugacy, depends only on the value Je- The character det opE^i: GuIq ^ ¥/ 
describes the Galois action on the £-th roots of unity, so det(G) = ¥/. 

For a subgroup G of GL 2 (F£) with det(G) = F}^ and —I G G, we can associate a modular curve 
Xq] it is a smooth, projective and geometrically irreducible curve defined over Q. It comes with a 
natural morphism 

■kg - Xg^ SpecQ[}] U (oo) =: Pq 
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such that for an elliptic curve E/Q with Je ^ {0,1728}, the group pE,liGalq) is conjugate in 
GL 2 (Ff) to subgroup of G if and only if the Je = T^GiP) for some rational point P G Xg'(Q). 

Much of this paper is dedicated to describing those modular curves Xq of genus 0 with Xq (Q) / 
0. Such modular curves are isomorphic to the projective line and their function held is of form Q(/i) 
for some modular function h of level 1. Giving the morphism eq is then equivalent to expressing 
the modular j-invariant in the form J(/i) for a unique rational function J(t) G Q(t). 

Once we have determined G, we know that p£:^£(GalQ) will either be the full group G or equal to 
an index 2 subgroup 77 of G for which —I ^ H. For each such H, it is then a matter of determining 
whether the quadratic character GalQ G —)• G/H = {±1} is trivial or not. 


We will Hrst focus on the general case of non-CM elliptic curves over Q. In §1.9, we will give a 
complete description of the groups ps^£(GalQ) when E/Q has complex multiplication. 


Notation. We now dehne some specihc subgroups of GL 2 (F£) for an odd prime i. Let Gs{i) be 
the subgroup of diagonal matrices. Let e = —lif7 = 3 (mod 4) and otherwise let e > 2 be the 
smallest integer which is not a quadratic residue modulo i. Let Cns{P) be the subgroup consisting 
of matrices of the form with (a, 6 ) G — {(0,0)}. Let Ns{t) and Nns{i) be the normalizers 

of Cs{i) and G„s(7), respectively, in GL 2 (F£). We have [iV<i(7) : Gs{i)] = 2 and the non-identity 
coset of Gs{i) in Ns{i) is represented by (5 q). We have [A^ns(^) : G„s(7)] = 2 and the non-identity 
coset of Cnsi^) in Xns{i) is represented by (g _?i)- Let B{£) be the subgroup of upper triangular 
matrices in GL 2 (F^). 


1.1. i = 2 . Up to conjugacy, there are three proper subgroups of GL 2 (F 2 ): 


Gi = {/}, G2 = {/, (1})}, Gs = {/, ( U), (? })}. 


For i = 1,2 and 3, the index [GL 2 (F 2 ) : Gi] is 6 , 3 and 2, respectively. Define the rational functions 

("+2 -I j.-I 1 \3 ('+_|_1')3 

Ji(i) = 256L^2(^^-^, J2(t) = 256 ^ ^ ^ , ^t) = t^ + 1728. 

Theorem 1.1. Let E be a non-CM elliptic curve overQ. Then / 9 _E, 2 (GalQ) is conjugate in GL 2 (F 2 ) 
to a subgroup of Gi if and only if je is of the form Ji{t) for some t G Q. 


1.2. i = 3 . Define the following subgroups of GL 2 (F 3 ): 


• Let Gi be the group Gs(3). 

• Let G 2 be the group Ns{3). 

• Let G 3 be the group 71(3). 

• Let G 4 be the group Nnsi3). 

• Let 77i^i be the subgroup consisting of the matrices of the form (g °). 

• Let 773^1 be the subgroup consisting of the matrices of the form (g * ). 

• Let 773^2 be the subgroup consisting of the matrices of the form (j) 1 )• 

The index in GL 2 (F 3 ) of the above subgroups are 12, 6 , 4, 3, 24, 8 and 8 , respectively. Each of the 

groups Gi contain —7. The groups Hij do not contain —7 and we have Gi = EHij. 

Define the rational functions: 


Ji{t) = 27 


jt + iyit + sYie + s) 

P{P + 3t + 3f 


J2it) = 27 


{t + lf{t-3f 

P 


h{t) = 27 


it + l){t + 9f 


Ji{t) = t^ 


For t gQ — {0}, let £i^t be the elliptic curve over Q defined by Weierstrass equation 
= 3.3 _ -M)(t 3)(t^ -h 3)x - 2(t^ - 3)(f^ 6t^ -h 18t^ -h 18t -h 9). 
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For t G Q — {0, — 1}, let be the elliptic curve over Q defined by Weierstrass equation 

= x^ - 3{t + lf{t + 9)x - 2{t + - 18t - 27). 

The j-invariant of £i^t is Ji{t). 

Theorem 1.2. Let E be a non-CM elliptic curve over Q. 

(i) If pe ,3 is not surjective, then pE, 3 iGal<Q) is conjugate in GL 2 (F 3 ) to one of the groups Gi 
or Hij. 

(ii) The group pE,s^GalQ) is conjugate to a subgroup of Gi if and only if jE is of the form Ji(t) 
for some t G Q. 

(hi) Suppose that ±pE,s^Galq) is conjugate to Gi. Fix an element t € Q such that Ji{t) = jE- 
The group / 0 £;^ 3 (GalQ) is conjugate to Hi^i if and only if E is isomorphic to £i^t or the 
quadratic twist of £i^t by —3. 

(iv) Suppose that ±/?E, 3 (GalQ) is conjugate to G 3 . Fix an element t G Q such that J 3 {t) = jE- 
The group pE, 3 {GalQ) is conjugate to H 31 if and only if E is isomorphic to £ 3 ^ 1 - 
The group / 3 £;^ 3 (GalQ) is conjugate to H 3 2 if ond only if E is isomorphic to the quadratic 
twist of £ 3^1 by —3. 

Remark 1.3. 

(i) Let us briefly explain how Theorem 1.2 can be used to compute / 9 £;^ 3 (GalQ); similar remarks 
will hold for the remaining primes (the case ^ = 2 is particularly simple since —1 = 1). If 
jE is not of the form Ji{t) for any i G {1,2,3,4} and t G Q, then /9£;^3(GalQ) = GL 2 (F 3 ). 
To check if jE is of the form J(t), clear denominators in J(t) — jE to obtain a polynomial 
in t which one can then determine whether it has rational roots or not. 

So assume that pE ,3 is not surjective, and let i be the smallest value in { 1 , 2 ,3,4} for 
which jE = Jiit) for some t G Q- By Theorem 1.2(i) and (ii), we deduce that ±/?£;^ 3 (GalQ) 
is conjugate to Gp, note that the groups Gi are ordered by decreasing index in GL 2 (F 3 ). 
After possibly conjugating pE, 3 , we may assume that ±/ 3 £;^ 3 (GalQ) = Gi. If /?£;^ 3 (GalQ) 
does not equal Gi, then it is equal to one of the subgroups Hij and parts (hi) and (iv) give 
necessary and sufficient conditions to check this. 

(ii) Our rational functions Ji{t) are certainly not unique. In particular, any function of the 
form Ji{{at + 6)/ {ct + d)) will work with fixed a,b,c,d G Q satisfying ad — be ^ 9 (though 
in general, one needs to also consider the value of Ji{t) at 00 ). Given ,Ji{t), our equations 
for £i^t were produced by an algorithm that we will later describe; there are other possibly 
simpler choices. 

1.3. 1 = 1) . Define the following subgroups of GL 2 (F 5 ): 

• Let Gi be the subgroup consisting of the matrices of the form ± (q °). 

• Let G 2 be the group G<j(5). 

• Let G 3 be the unique subgroup of Nns{5) of index 3; it is generated by (§ 2 ), ( 0 - 1 ) 

(-0 G'l 

I 3 oh 

• Let G 4 be the group Ns{5). 

• Let G 5 be the subgroup consisting of the matrices of the form ±( 01 ). 

• Let Gq be the subgroup consisting of the matrices of the form ± ( q * ). 

• Let Gj be the group Nns{5). 

• Let Gg be the group B{5). 

• Let Gg be the unique maximal subgroup of GL 2 (F 5 ) which contains Ns{5); it is generated 
by (oi)> (o2)> (? V) and (} ii). 

• Let Hi^i be the subgroup consisting of the matrices of the form ( q °). 

• Let Hi ^2 be the subgroup consisting of the matrices of the form (“^ 0 ). 
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• Let be the subgroup consisting of the matrices of the form (o i )• 

• Let be the subgroup consisting of the matrices of the form (g ^2). 

• Let be the subgroup consisting of the matrices of the form ( q * ). 

• Let Hq ^2 be the subgroup consisting of the matrices of the form (. 

The index in GL2(F5) of the above subgroups are 60, 30, 30, 15, 12, 12, 10, 6, 5, 120, 120, 24, 24, 
24 and 24, respectively. Each of the groups Gi contain —I. The groups Hij do not contain —I and 
we have Gi = ±Hij. 

Define the rational functions: 

_ + 228t^^ + 494t^° - 228t^ + 1)^ 

“ t5(tio_ 11^5 _ 1)5 

_ + 5t + 5)3 + 5^2 25)3+ 5t3 + 20t^ + 25t + 25)3 

“ + 5t3 + 15t2 + 25t + 25)5 

_ + 5t + 10)3 (2t2 + 5t + 5)3 + 30t3 + 95t^ + 150t + 100)3 

“ (t2 + bt + 5f{t^ + 5t3 + 15t2 + 25t + 25)5 

_{t + 5)3(t2 _ 5)3(t2 + + 10)3 

“ (t2 + 5t + 5)5 

_ + 228t3 + 494t2 - 228t + 1)3 

“ t(t2-llt-l)5 

_ - 12t3 + 14t2 + 12t + 1)3 

~ t5(t2 _ lit - 1) 

_ 53(t + l)(2t + l)3(2t2 -3t + 3)3 

(t2 + t — 1)5 

_ 52(t2 + lot+ 5)3 
t® 

= t3(t2 + 5t + 40) 

For t G Q — {0}, let be the elliptic curve over Q defined by the Weierstrass equation 
= x^ - 27(t^° + 228t33 + 494t30 - 228t^ + l)x 

+ 54(t30 - 522t23 _ i0005t^° - lOOOht^^ + 522t^ + 1). 

For t £ Q — {0}, let be the elliptic curve over Q defined by the Weierstrass equation 

y2 = 3.3 _ 27(^4 228t3 + 494t2 - 228t + l)x + 54(t® - 522t^ - lOOObt'^ - lOOObt^ + 522t + 1). 

For t £ Q — {0}, let Tg,* be the elliptic curve over Q defined by the Weierstrass equation 
= x3 - 27(t'^ - 12t3 + Mt^ + 12t + l)x + 54(t® - 18t3 + 75t'^ + 75t‘^ + 18t + 1) 

The j-invariant of £i^t is Ji{t). 

Theorem 1.4. Let E be a non-CM elliptic curve over Q. 

(i) If pe ,5 is not surjective, then yOE^5(GalQ) is conjugate in GL2(F5) to one of the groups Gi 
or Hij. 

(ii) The group /?E,5(GalQ) is conjugate to a subgroup of Gi if and only if jE is of the form Ji(t) 
for some t £ Q. 

(hi) Suppose that ±pE^5(GalQ) is conjugate to Gi with i £ {1,5,6}. Fix an element t £ Q such 
that Ji{t) = jE- 

The group /?E,5(GalQ) is conjugate to if and only if E is isomorphic to Si^t- 


Ji(t) 

J2{t) 

Mt) 

J^it) 

Jeit) 

Jj{t) 

Js{t) 

'h{i) 










The group / 0 _E, 5 (GalQ) is conjugate to Hi ^2 if and only if E is isomorphic to the quadratic 
twist of Si^t by 5. 


1.4. i = 7 . Define the follow subgroups of GL 2 (F 7 ): 

• Let Gi be the subgroup of Ns{7) consisting of elements of Cs(7) with square determinant 
and elements of A^s(7) — Cs{7) with non-square determinant; it is generated by ( 94 )) ( 10 ) 
and (-qI _°i). 

• Let G 2 be the group Ns{7). 

• Let G 3 be the subgroup consisting of matrices of the form 

• Let G 4 be the subgroup consisting of matrices of the form 

• Let G 5 be the subgroup consisting of matrices of the form 

• Let Ge be the group Nns{7). 

• Let Gy be the group B{7). 

• Let Hi^i be the subgroup generated by ( 94 ) and ( 19 ). 

• Let H 31 be the subgroup consisting of the matrices of the 

• Let 7 / 3^2 be the subgroup consisting of the matrices of the 

• Let be the subgroup consisting of the matrices of the 

• Let 7 / 4^2 be the subgroup consisting of the matrices of the 

• Let be the subgroup consisting of the matrices of the 

• Let H ^^2 be the subgroup consisting of the matrices of the 

• Let Hj i be the subgroup consisting of the matrices of the 

• Let Hj 2 be the subgroup consisting of the matrices of the 

The index in GL 2 (F 7 ) of the above subgroups are 56, 28, 24, 24, 24, 21, 8 , 112, 48, 48, 48, 48, 48, 
48, 16 and 16, respectively. Each of the groups G* contain —I. The groups Hij do not contain —I 
and we have G* = ±Hij. 

Define the rational functions 

3^ • 5 • 7^2^ 

t{t + l)3(t2 - 5t l)3(t2 - 5t + 8)3(t4 _ 5^3 g^2 _ 7 ^ + 7)3 

{E — 4t2 -I- 3t -b 1)’^ 

- t -b l)^(t® - llt^ + 30t^ - 15t^ - lOt^ -b 5t -b 1)^ 

{t — iyE{t^ — 8t^ -b 5t -b 1 ) 

(y -t + 1)3 (t® + 229^ + 270t^ - 1695t3 -b - 235t -b l)^ 

{t — l)t{E — 8t2 -b 5t -b 1)'^ 

{y -3t- 3)3(t2 _ t + -9t + 5)3(5t2 - t - 1)3 

(t3 -2t‘^ - t+ l)(t3 _ b2 _ 2 t + 1)7 
64^3(^2 + 7)3^^2 _^t + 14)3(5t2 _ 74^ _ 7)3 

(t3 - 7t2 -b 7t -b 7)7 
(t2 -b 245t -b 2401)3 (t2 + I 3 t + 49 ) 

E 


Ji{t) = 
hit) = 

hit) = 

hit) = 

hit) = 

hit) = 

hit) = 


±(o^)- 

±(ri)- 

(0±a). 


form (1 *). 

fo™ (?a0- 

form (51). 
form ( ). 

form (Y;.). 

form 

fo™ (L* 2 )- 

form (“q *). 


Let £i be the elliptic curve over Q defined by the Weierstrass equation 


y2 = x3- 5373 a:-5'‘7^ 106 
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For t G Q — {0,1}, let £^ 3 ^* be the elliptic curve over Q defined by the Weierstrass equation 
= x^ - 27{f + - lit® + 30t^ - 15t^ - lOt^ + 5t + l)x 

+54(t^2 - - 354t^ + 570t® - 486t^ 

+ 273t® - 222t® + 174t^ - 46t^ - 15t^ + 6 t + 1). 

For t G Q — {0,1}, let £ 14^4 be the elliptic curve over Q defined by the Weierstrass equation 
y 2 = a;3 _ 27(^2 _ ^ + 229t^ + 270t‘^ - 1695f^ + 1430t2 - 235f + l)a; 

+ 54 (ti 2 _ 522^11 _ 8955f^° + 37950f^ - 70998t® + 131562f^ 

- 253239t® + 316290f'^ - 218058f'‘ + 80090t^ - 14631t2 + 510t + 1). 

For t G Q, let be the elliptic curve over Q defined by the Weierstrass equation 

y 2 = ^3 _ 27.7(^2 _ 3 ^ _ 3)(^2 _ ^ ^^(^ 3^2 _ 9 ^ 5)(5^2 _ ^ 

- 54 • 7^(t^ - + m'^ - 2At + 9)(3t'^ - - 5t‘^ - 2t - l){9t^ - 12t^ - + 8t - 3). 

For t G Q — {0}, let be the elliptic curve over Q defined by the Weierstrass equation 
y 2 = 3,3 _ 27(^2 ^ 3 ^ 49)^ + 245t + 2401)x 

+ 54(t2 + I3t + 49)^ - 490t^ - 21609t2 - 235298t - 823543). 

The j-invariant of £i^t is Ji{t). 

Theorem 1.5. Let E be a non-CM elliptic curve over Q. 

(i) If pe ,7 is not surjective, then pEj(GalQ) is conjugate in GL 2 (F 7 ) to one of the groups Gi 
or Hij. 

(ii) The group /?Ej(GalQ) is conjugate to a subgroup of Gi if and only if jE is of the form Ji(t) 
for some t G Q. 

(iii) The group pEj(GalQ) is conjugate to if and only if E/Q is isomorphic to £i or to the 
quadratic twist of £i by —7. 

(iv) Suppose that ±/ 9 s^ 7 (GalQ) is conjugate to Gi with i G {3,4, 5,7}. Fix an element f G Q 
such that Ji{t) = jE- 

The group /?Ej(GalQ) is conjugate to Hi^i if and only if E is isomorphic to £i^t- 

The group / 0 £;j(GalQ) is conjugate to Hi ^2 if nnd only if E is isomorphic to the quadratic 

twist of £i^t by —7. 

1.5. i= 11 . 

• Let Gi be the subgroup generated by ± (J {) and ( q e )• 

• Let G 2 be the subgroup generated by ± (J {) and (g 7 ) • 

• Let G 3 be the group A^„s(ll)- 

• Let ifiq be the subgroup generated by (g }) and (g g). 

• Let Hi ^2 be the subgroup generated by (g }) and (g 5 ). 

• Let 7 ^ 2,1 be the subgroup generated by (g }) and (g 7 ). 

• Let 7 ^ 2,2 be the subgroup generated by (g }) and (g 4 ). 

The index in GL 2 (Fii) of the above subgroups are 60, 60, 55, 110, 120, 120, 120 and 120, re¬ 
spectively. Each of the groups Gj contain —I. The groups TLjj- do not contain —I and we have 

Gi = ±Hij. 

Let £ be the elliptic curve over Q defined by the Weierstrass equation y'^ + y = x^ — x"^ — 7x + 10 
and let O be the point at infinity. The Mordell-Weil group T(Q) is an infinite cyclic group generated 
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by the point (4,5). Define 


where 

/i = + 3x — 6, 

/3 = 62 / + llx - 19, 
h = lly + (2x2 + 17x-34). 


J{x,y) 


f2 f 11 

J5J6 


f 2 = ll(x2 - 5 ) 2 / + (2x^ + 23x3 - 72x2 - 28x + 127), 
/4 = 22(x - 2 ) 2 / + (5x3 + 120), 

k = {x- 4 ) 2 / - (5x - 9). 


We shall view J as a morphism £ —)• U { 00 }. 


Let fi/Q be the elliptic curve dehned by the Weierstrass equation y'^ = — 27 ■ ll'^x + 54-113-43 

Let £ 2 / 0 . be the elliptic cnrve defined by the Weierstrass equation y'^ = x^ — 27 ■ 11^ ■ 131x + 54 - 
11^- 4973. 


Theorem 1.6. Let E be a non-CM elliptic curve defined over Q. 

(i) If pe ,11 is not surjective, then / 9 _E,ii(GalQ) is conjugate in GL 2 (Fii) to one of the groups 
Gi or Hij. 

(ii) The group ±/Osqi(GalQ) is conjugate to Gi in GL 2 (Fii) if and only if jE = —11^. 

(hi) The group ±/Osqi(GalQ) is conjugate to G 2 in GL 2 (Fii) if and only if jE = —H • 13l3. 

(iv) The group / 3 £;,ii(GalQ) is conjugate to G 3 in GL 2 (Fii) if and only if jE = JiP) for some 
point P e F(Q) — {O}. 

(v) For i S {1,2}, the group / 0 £;qi(GalQ) is conjugate in GL 2 (Fii) to L7jq if and only if E is 
isomorphic to £i. 

(vi) For i S {1,2}, the group / 0 £;,ii(GalQ) is conjugate in GL 2 (Fii) to Hi ^2 if ond only if E is 
isomorphic to the quadratic twist of £i by — 11 . 

Remark 1.7. The modular curve X+g(ll) = is the only one in our classihcation that has genus 
1 with infinitely many rational points. Halberstadt [Hal98] showed that Xfjfill) is isomorphic to 
£ and that the morphism to the j-line corresponds to J{x,y). 

In §4.5.5, we give explicit polynomials A,B,G G of degree 55 snch that for a non-GM 

elliptic curve A/Q, we have jA = J{P) for some P G F(Q) — {O} if and only if the polynomial 
A{x)j‘^ + B[x)jE + G{x) G Q[x] has a rational root. This gives a straightforward way to check the 
criterion of Theorem 1.6(iv). 

1.6. I = 13 . Define the following subgroups of GL 2 (Fi 3 ): 

• Let Gi be the subgroup consisting of matrices of the form ( q feS )- 

• Let G 2 be the subgroup consisting of matrices of the form ( 'q *) - 

• Let G 3 be the subgroup consisting of matrices (0 ^) for which {a/b)^ = 1. 

• Let G 4 be the subgroup consisting of matrices of the form ( q + ). 

• Let G 5 be the subgroup consisting of matrices of the form (“J *). 

• Let Ge be the group i?(13). 

• Let G 7 be the subgroup generated by the matrices ( 02 )) ( 03 )’ (i~o^) (-\ 1 )! 

contains the scalar matrices and its image in PGL 2 (Fi 3 ) is isomorphic to © 4 . 

• Let 774^1 be the subgroup consisting of matrices of the form (g + )• 

• Let 7 / 4^2 be the subgroup generated by matrices of the form ( ^^ ^* 4 ) and (g 4 )- 

• Let 775^1 be the subgroup consisting of matrices of the form ( {(^ * ) ■ 

• Let 775^2 be the subgroup generated by matrices of the form (* 2 ) and (g 2 )- 
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The index in GL 2 (IFi 3 ) of the above subgroups are 42, 42, 42, 28, 28, 14, 91, 56, 56, 56 and 56, 
respectively. Each of the groups Gi contain —I. The groups Hi^j do not contain —I and we have 

Gi = ±Hij. 


Define the polynomials 

Pi(t) = 231t^^ + 269f^° - 3160f® + 6022f® - 9616f^ + 21880t® 

- 341021® + 282971^ - 124551® + 28761^ - 2431 + 1 
P2(l) = 1®2 - 91®^ + 291®° - 401° + 221® - 161^ + 401° - 221® - 231® + 251® -41^-31 + 1 
P3(l) = (1® - 1® + 21^ - 91 + 3) (31® - 31® - 71^ + 121 - 4) (41® - 41® - 51^ + 31-1) 

P^[t) = 1® + 2351®' + 12071° + 9551® + 38401® - 9551® + 12071^ - 2351 + 1 
P^{t) = 1® - 51®' + 71° - 51® + 51® + 71^ + 51 + 1 
Pg(l) = 1® + 71® + 201^ + 191 + 1 

Q4(1) = 1^2 _ 512^11 - 130791®° - 323001° - 1047921® - 1118701®' 

- 4193681° + 1118701® - 1047921® + 323001® - 130791^ + 5121 + 1, 

Q5(1) = 1^2 _ 8^11 + 251®° - 441° + 401® + 181^ - 401° - 181® + 401® + 441® + 251^ + 81 + 1 


and the rational functions 

(l2-l + l)3Pi(l)® 
(1-1)1(13-412+1 + 1)13 
^ 13®(1^-1+1)3P3(1)3 

(l3 - 412+1 + 1)13(5^3 _ 7^2 _8t +5) 

^ ^ _ (1® — 1® + 51^ + 1 + 1)^5 (l)® 

'®5+j — -717772-77-77- 


Ut) 

Mt) 

’h{t) 


(l2-l + l)3P2(i)3 

(1-I)13ll3(i3_4i2_^^_^7) 

(1® -13 + 512 +1+ 1)P4(1)3 
1(12 - 31 - 1)13 
(l^ + 51 + 13)+6(^)^ 

1 ■ 


For 1 G Q — {0}, let be the elliptic curve over Q defined by the Weierstrass equation 


= X® — 27(1® — 1® + 51^ + 1 + l)®P4(l)x + 54(1^ + l)(l® — 1® + 51^ + 1 + l)®Q4(l). 


For 1 G Q — {0}, let be the elliptic curve over Q defined by the Weierstrass equation 
= X® — 27(1® — 1® + 51^ + 1 + l)®P5(l)x + 54(1^ + l)(l® — 1® + 51^ + 1 + 1)®Q5(1). 


Theorem 1.8. Let E be a non-CM elliptie eurve over Q. 

(i) If pe, isiGalq) is conjugate to a subgroup of B(13), then /9_E,i3(GalQ) is conjugate to one of 
the groups Gi with 1 < i < 6 or to a group Hij. 

(ii) For 1 < 1 < 6, /9_E,i3(GalQ) is conjugate in GL 2 (Fi 3 ) to a subgroup of Gi if and only if jE 
is of the form Ji{t) for some 1 G Q. 

(hi) For an i & {4,5}, suppose that Ji(t) = jE for some 1 G Q. 

The group /5E,i3(GalQ) is conjugate to Hi^i if and only if E is isomorphic to Ei^f 

The group / 0 £;,i 3 (GalQ) is conjugate to Hi ^2 if only if E is isomorphic to the quadratic 

twist of Ei^t by 13. 

(iv) If jE is 


2® • 5 • 13® • 17® 2®2 • 5® • 11 • 13® 

313 ’ 313 

then /9£;,i3(GalQ) is conjugate to Gj. 


2®® • 33 • 13® • 1273 • 139® • 157® • 283® • 929 


or 


513.6113 











Up to conjugacy, there are four maximal subgroups G of GL 2 (Fi 3 ) that satisfy det(G) = 
they are Gq = A^s(13), A^„s(13) and G 7 . The cases concerning subgroups of -6(13) are 

completely handled in Theorem 1.8. 

Baran [Barl4] has shown that the modular curves X^(13) and X^^(13) attached to -/Vs(13) and 
Nns{^3), respectively, are both isomorphic to the genus 3 curve G dehned in Pq by the equation 

{-y - z)x^ + {2y^ + zy)x^ + (-/ + V - + z^)x + {2z‘^y'^ - 3z^y) = 0. 

In [Bar 14], the morphism from the model of the modular curves to the j-line is given. The seven 
rational points (0, 0,1), (0,1, 0), (0,3, 2 ), ( 1 ,0, —1), (1,0,0), (1,0,1), (1,1,0) of G all correspond to 
cusps and CM points on Xs(13) and X„s(13). Conjecturally, there are no non-CM elliptic curves 
E over Q with / 9 E,i 3 (GalQ) conjugate to a subgroup of .A^s(13) or ./V„s(13); equivalently, G has no 
other rational points. 

Denote by X 64 ( 13 ) the modular curve corresponding to Gy. Banwait and Cremona [BC14] have 
shown that Xq^{13) is isomorphic to the genus 3 curve G' dehned in P^ by the equation 

Ax'^y — 3x‘^y‘^ + 3xy^ — x^z + IQx^yz — llxy^z + 5y^z + 3x‘^z‘^ + 9xyz'^ + y^z^ + xZ^ + 2yz^ = 0 

and have found the morphism from the modular curve to the j-line. The four rational points 
(0,1,0), (0,0,1), (1,0, 0) and (1, 3, — 2 ) of C correspond to a CM point and three non-CM points; 
the non-CM points give rise to the three j-invariants in Theorem 1.8(iv). 

Suppose -E/Q is an elliptic curve with one of the j-invariants from Theorem 1.8(iv). Prom [BC14], 
we hnd that the image of PE,i 3 (GalQ) in PGL 2 (Fi 3 ) is isomorphic to S 4 . Therefore, Pe, isiGalq) is 
conjugate to Gy since Gy has no proper subgroups H whose image in PGL 2 (Fi 3 ) is isomorphic to 
©4 and satishes det(-ff) = F^^g. In particular, this proves Theorem 1.8(iv). 

Conjecturally, if E is a non-CM elliptic curve over Q, then pe, isiGalq) is conjugate to a subgroup 
of Gy if and only if Je is one of three values from Theorem 1.8(iv); equivalently, G' has no other 
rational points. 

Remark 1.9. The case ^ = 13 is the hrst for which we do not have a complete description. As 
explained above, it remains to determine all the rational points of the genus 3 curves G and G'. 

1.7. I > 17. We first describe all the known cases of non-CM elliptic curves 6 /Q for which pE,i is 
not surjective for some prime i > 17. Define the following groups: 

• Let Gi be the subgroup of GL 2 (Fiy) generated by (§fi). (Si) and ( 01 ). 

• Let G 2 be the subgroup of GL 2 (Fiy) generated by ( ^), ( 4 ) and ((j }). 

• Let G 3 be the subgroup of GL 2 (F 3 y) consisting of the matrices of the form *). 

• Let G 4 be the subgroup of GL 2 (F 37 ) consisting of the matrices of the form (g ^ 3 ). 

Theorem 1.10. 

(i) If E/Q has j-invariant —17 • 373^/2^'^ or —17^ • 101^/2, then pE, ly(GalQ) is conjugate in 
GL 2 (Fiy) to Gi or G 2 , respectively. 

(ii) If E/Q has j-invariant —7-11^ or—7T37^-2083^, then pE, 37 {GaliQ) is conjugate mGL 2 (F 3 y) 
to G 3 or Gi, respectively. 

Theorem 1.11 (Mazur, Serre, Bilu-Parent-Rebolledo). Fix a prime ^ > 17 and let E be a non-CM 
elliptic curve defined over Q. If{£,jE) does not belong to the set 

(1.1) {(17, -17 • 373^2^^), (17, -17^ • 101^2), (37, -7 • 11^), (37, -7 • 137^ • 2083^)}, 

then either pe/ is surjective or pE/{Ga\ir^ is conjugate to a subgroup of Nns{I). 
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Proof. The group GL 2 (F£) has either three or four maximal subgroups with determinant F^. They 
are B{i), Ns{i), Nns{Bj and when i = ±3 (mod 8 ), we also have a maximal subgroup whose 

image in PGL 2 (F£) is isomorphic to the symmetric group S 4 . 

Take any non-CM elliptic curve E over Q. Serre has shown that pE,i{Ga\.Q) cannot be conjugate 
to a subgroup of cf. [SerSl, §8.4]. Bilu, Parent and Rebolledo have proved that / 9 £;^£(GalQ) 

cannot be conjugate to a subgroup of Ns{i), cf. [BPRll] (they make effective the bounds in earlier 
works of Bilu and Parent using improved isogeny bounds of Gaudron and Remond). The B{i) 
case follows from a famous theorem of Mazur, cf. [Maz78]. The modular curves Xo(17) and Xq(37) 
each have two rational points which are not cusps or GM points and they are accounted for by the 
curves of Theorem 1.10. □ 

We conjecture that Theorem 1.11 describes all the reasons that pE,e can fail to be surjective for 
a non-GM E/Q and a prime £ > 17; this is a problem raised by Serre, cf. [Ser81, p.399], who asked 
if pE,e is surjective whenever i > 37. 

Conjecture 1.12. If E is a non-CM elliptic curve over Q and £> 17 is a prime sueh that the 
pair {£,jE) does not belong to the set (1.1), then /9^^£(GalQ) = GL 2 (F^). 

Even if Gonjecture 1.12 is false for some E/Q and £ > 17, the following proposition gives at most 
two possibilities for the image of pE/ (they can be distinguished computationally by looking at the 
division polynomial of E at 

Proposition 1.13. Suppose that pE/ is not surjective for a non-CM elliptic curve E/Q and a 
prime £>17 for which {I^Je) does not lie in the set (1.1). 

(i) If £ = 1 (mod 3), then /?_E,^(GalQ) is eonjugate in GL 2 (F£) to Nns{£)- 

(ii) If £ = 2 (mod 3), then / 9 £;_^(GalQ) is eonjugate in GL 2 (F£) to Nns{£) or to the group 

G := {a3 : a G Cns{£)} U { (J : a G Cns{£)]- 

1.8. Algorithm. Let E/Q be a non-GM elliptic curve (when E/Q has complex multiplication, the 
groups / 3 E^£(Gal(Q) are all described in §1.9 below). In [Zywl5], we give an algorithm to compute 
the set S' of primes ^ > 13 for which pE^i is not surjective. 

Gombined with the theorems from §§1.1-1.5, we are now able to compute the (finite) set S of 
primes £ for which pE/ is not surjective. Moreover, using the results from §§1.1-1.5, we can give 
the group / 5 E,£(GalQ), up to conjugacy in GL 2 (F^), for each £ £ S. 

Sutherland has a probabilistic algorithm to determine the groups / 3 £;^£(GalQ) by consider Frobe- 
nius at many primes p, [Sutl5]. His algorithm can in principle be made deterministic using effective 
versions of the Chebotarev density theorem. Sutherland’s algorithm has the advantage that it can 
be used for elliptic curves over a number field E Q (for our approach, we would have more 
modular curves to consider and those modular curves not isomorphic to Fq would need to be 
reconsidered). 

The next task that needs to be completed is to consider the images of Pe,i^ for small primes £ 
and n > 2. Rouse and Zureick-Brown have already done this for £ = 2, cf. [RZB14]; the case £ = 2 
is rather accessible since all the groups that occur are solvable. 
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1.9. Complex multiplication. Up to isomorphism over Q, there are thirteen elliptic curves with 
complex multiplication that are defined over Q. In Table 1 below, we give an elliptic curve E^j/Q 
with each of these thirteen j-invariants (this comes from [Sil94, Appendix A §3] though with some 
different models). The curve E^j has conductor N and has complex multiplication by an order R 
of conductor / in the imaginary quadratic field with discriminant —D. 


J-invariant 

D 

/ 

Elliptic curve EE,f 

N 

0 

3 

1 

= 2-3 _ 1 _ 

33 

2^3353 


2 

y2 _ x 3 _ 22 

2^3^ 

-2I53 • 53 


3 

y"^ = — 480x + 4048 

33 

2^33 = 1728 

4 

1 

y"^ = x'^ + X 

2« 

2333113 


2 

y2 x3 iix -\- 14 

25 

-3353 

7 

1 

y2 = x^- 1715x 33614 

7^ 

3353173 


2 

y2 = 2-3 291552; 1915998 

72 

2653 

8 

1 

y"^ = x^ — 4320x -|- 96768 

2® 

-215 

11 

1 

y2 = x ^ - 9504x 365904 

ll2 

-21533 

19 

1 

y"^ = x^ — 608x + 5776 

19^ 

-2I83353 

43 

1 

= x3 - 13760X -h 621264 

432 

-2153353113 

67 

1 

= x3 - 117920X -b 15585808 

672 

-2I83353233293 

163 

1 

y^ = x ^- 34790720X -b 78984748304 

1632 


Table 1. CM elliptic curves over Q 


We first describe the group pe, liGalq) up to conjugacy when E is a CM elliptic curve with 
non-zero j-invariant and i odd. 

Proposition 1.14. Let E he a CM elliptic curve defined over Q with Je 0. The ring of endo- 
morphisms of E^ is an order of conductor f in the ring of integers of an imaginary quadratic field 
of discriminant —D. Take any odd prime i. 

(i) If {-^) = 1 , then pE,t{Ga\(Q) is conjugate in GL2(IF£) to Ns{i). 

(ii) If {-^) = — 1 , then Pe, eiGalq) is conjugate in GL 2 ( 1 F£) to Nns{I)- 

(iii) Suppose that I divides D and hence D = i. Define the groups 

G = :aGF^6eFa, 

Hi = {{-o±a) and H 2 = {{%-1) : a € €¥e} 

If E is isomorphic to Eej, then pE/iGalq) is conjugate in GL 2 (F£) to Hi. 

If E is isomorphic to the quadratic twist of Eej by —I, then pE,liGalq) is conjugate in 
GL 2 (F£) to H 2 . 

If E is not isomorphic to Eej or its quadratic twist by —i, then pE/iGalq) is conjugate 
in GL 2 (F£) to G. ’ 

The following deals with the excluded prime i = 2. 

Proposition 1.15. Let E/Q be a CM elliptic curve. Define the subgroup G 2 = {/, (q})} of 

GL2(F2). 

(i) IfjE e { 24335 ^ 233^113, -3353, 3^5^173, 2 ® 53 }, then pi 7 ;, 2 (GalQ) is conjugate to G2. 

(ii) IfjE G {-2^53.53^ _2i5^ -2^533, -2^^3353, -2153353113, -218335323^293}, then PE,2{GalQ) 

GL2(F2). 
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(iii) Suppose that Je = 1728. The curve can he given by a Weierstrass equation y'^ = — dx 

for some d G . 

If d is a square, then / 0 £;, 2 (GalQ) = {/}. 

If d is not a square, then the group / 9 E, 2 (Gal(Q) is conjugate to G 2 . 

(iv) Suppose that je = 0. The curve E can he given by a Weierstrass equation y'^ = x^ + d for 
some d G . 

If d is a cube, then / 9 _E, 2 (GalQ) is conjugate in GL 2 (F 2 ) to the group G 2 . 

If d is not a cube, then / 9 _E, 2 (GalQ) = GL 2 (F 2 ). 

It remains to consider the situation where i is an odd prime and E/Q is an elliptic curve with 
jE = 0. That such curves have cubic twists make the classification more involved. 

Proposition 1.16. Let E be an elliptic curve over Q with jE = 0. Take any odd prime 1. 

(i) If i = I (mod 9), then /?E,£(GalQ) is conjugate to Ns{£) in GL 2 (F£). 

(ii) If £ = 8 (mod 9), then /?E^£(GalQ) is conjugate to Nns{£) in GL 2 (F£). 

(iii) Suppose that I is congruent to A or I modulo 9. Let E'/Q be the elliptic curve over Q 

defined by + WE', where e G {1,2} satisfies = e (mod 3). 

If E is not isomorphic to a quadratic twist of E', then / 3 £;^£(GalQ) is conjugate to Ns{T) in 
GL 2 (F^). 

If E is isomorphic to a quadratic twist of E', then Pe, e{GalQ) is conjugate in GL 2 (F£) to the 
subgroup G of Ns{i) consisting of the matrices of the form (ob) ^^(bo) ^ 

(iv) Suppose that i is congruent to 2 or 5 modulo 9. Let E'/Q be the elliptic curve over Q 

defined by + 16£®, where e G {1,2} satisfies = —e (mod 3). 

If E is not isomorphic to a quadratic twist of E', then pE,iiGalq) is conjugate to Nns{£) in 
GL 2 (F^). 

If E is isomorphic to a quadratic twist of E’, then pE,liGalq) is conjugate in GL 2 (F^) to 
the subgroup G of Nns (I) generated by the unique index 3 subgroup of Gns {(■) and 6 y (g -?i) • 

(v) Suppose that 1 = 8. The curve E can be given by a Weierstrass equation y^ = x^ + d for 
some d G Q^. Fix notation as in ^1.2. 

If d or —3d is a square and —Ad is a cube, then / 9 ^^ 3 (GalQ) is conjugate to idip. 

If d and —3d are not squares and —Ad is a cube, then /?£;, 3 (GalQ) is conjugate to Gi. 

If d is a square and —Ad is not a cube, then /?£;^ 3 (GalQ) is conjugate to 773 , 1 . 

If —3d is a square and —Ad is not a cube, then / 9 _E, 3 (GalQ) is conjugate to 773 , 2 - 

If d and —3d are not squares and —Ad is not a cube, then /?£;, 3 (GalQ) is conjugate to G 3 . 

1.10. Overview. We now give a very brief overview of the paper. In §2, we describe applicable 
subgroups G of GL 2 (F£); these groups have many of the properties that the groups ±/ 0 £;,£(GalQ) do. 

In §3, we recall what we need concerning the modular curve Xg/Q; we will identify its function 
field with a subfield of the field of modular function for the congruence subgroup r(7). 

In §4, we prove the parts of our main theorems that determine ±/?£;,£(GalQ). We describe the 
rational points of Xq when i is small. When Xq has genus 0 and Xg(Q) 7 ^ 0, then the function 
field of Xg is of the form Q{h) for some modular function h. Much of this section is dedicated to 
describing such h and determining the rational function J(t) G Q{t) such that J{h) is the modular 
y-invariant. 

Assuming that G := ±/?£;,£(GalQ) is known, with E/Q non-CM, we describe in §5 how to deter¬ 
mine the (finite number of) quadratic twists of E' of E for which Pe', eiGalq) is not conjugate to 
G. In § 6 , we prove the parts of our main theorems that determine / 0 _E,£(GalQ) given ±/ 9 £;,£(Gal(Q). 

In §7, we prove the propositions from §1.9 concerning GM elliptic curves defined over Q. The 
y-invariant 0 case requires special attention since one has to worry about cubic twists. Finally, in 
§ 8 , we prove Proposition 1.13. 
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The equations in §1.1-1.7 and Magma code verifying some claims in §4 and §6 can be found at: 
http://WWW.math.Cornell.edu/~zywina/papers/Possiblelmages/ 

Acknowledgments. Thanks to Andrew Sutherland, David Zureick-Brown and Rene Schoof. The 
computations in this paper were performed using the Magma computer algebra system [BCP97]. 

2. Applicable subgroups 

Fix an integer N >2. For an elliptic curve E/Q, let E[N] be the A-torsion subgroup of E{Q). 
After choosing a basis for E[N] as a Z/AZ-module, the natural GalQ-action on E[N] can be 
expressed in terms of a Galois representation 

PE,N- GuIq —>• GL 2 (Z/AZ). 

When A is a prime, these agree with the representations of §1. We now describe some restrictions 
on the possible images of pe,n- 

Definition 2.1. We say that a subgroup G of GL 2 (Z/AZ) is applicable if it satisfies the following 
conditions: 

• G / GL2(Z/AZ), 

• -I gG and det(G) = {TLjNTLY, 

• G contains an element with trace 0 and determinant —1 that fixes a point in {'L/N'LY of 
order A. 

This definition is justified by the following. 

Proposition 2.2. Let E be an elliptic curve over Q for which pe,n is not surjective. Then 
i/ 5 E, 7 v(GalQ) is an applicable subgroup o/GL 2 (Z/AZ). 

Proof. The group G := ±/ 3 £;^Ar(GalQ) clearly contains —I. The character detopE^N- GuIq —)• 
(Z/AZ)^ is the surjective homomorphism describing the Galois action on the group of A-th roots 
of unity in Q, i.e., for a A-th root of unity C G Q, we have a{() = ^ g GuIq. 

Therefore, detopE^N is surjective and hence det(G) = (Z/AZ)^. 

Let c G Gal(Q/Q) be an automorphism corresponding to complex conjugation under some em¬ 
bedding Q ^ C. Set g := pe,n{c)- ^ topological group, the connected component of E{E.) 
containing the identity is isomorphic to M/Z. Therefore, A(M) contains a point Pi of order A. 
We may assume that pe,n is chosen with respect to a basis whose first term is Pi, and hence g is 
upper triangular whose first diagonal term is 1. We have det(g') = — 1 since c acts by inversion on 
A-th roots of unity. Therefore, g is upper triangular with diagonal entries 1 and —1, and hence 
tr:{g) = 0. 

Now suppose that G = GL 2 (Z/AZ). Define S = Pe, NiGalq) n SL 2 (Z/AZ). Since G = 
GL 2 (Z/AZ), pE,N{GaliQ) Y GL 2 (Z/AZ) and det(/ 3 E^Ar(GalQ)) = (Z/AZ)^, we deduce that S / 
SL 2 (Z/AZ) and ±5 = SL 2 (Z/AZ). However, this is impossible by Lemma 2.3 below, so we must 
have G Y GL 2 (Z/AZ). □ 

Lemma 2.3. There is no proper subgroup S o/SL 2 (Z/AZ) such that ES = SL 2 (Z/AZ). 

Proof. Suppose that S' is a subgroup of SL 2 (Z/AZ) for which ±S = SL 2 (Z/AZ). By [ZywlO, 
Lemma A. 6 ], we deduce that there is a prime power P dividing A such that the image S of S in 
SL 2 (Z/PZ) is a proper subgroup satisfying ±S = SL 2 (Z/PZ). So without loss of generality, we 
may assume that N = i’^. 

The group S has index 2 in SL 2 (Z/.£'^Z). Therefore, S is normal in SL 2 (Z/PZ) and the quotient 
is cyclic of order 2. However, the abelianization of SL 2 (Z/PZ) is a cyclic group of order gcd(P, 12), 
cf. [ZywlO, Lemma A.l]. Therefore, we must have i = 2. Since the abelianization of SL 2 (Z/ 2 ®Z) is 
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cyclic of order 2 or 4, we find that S is the unique subgroup of SL 2 (Z/ 2 ®Z) of index 2 . The group 
S is now easy to describe; it is the group of elements in SL 2 (Z/ 2 ®Z) whose image in SL 2 (Z/ 2 Z) lies 
in the unique cyclic group of order 3. However, this implies that ±5 7 ^ SL 2 (Z/ 2 ®Z) since —I = I 
(mod 2 ). This contradiction ensures that no such S exists. □ 

Remark 2.4. When is a prime i, which is the setting of this paper, the last condition in the 
definition of applicable subgroup can be simplified to say simply that G contains an element with 
trace 0 and determinant — 1 . 


3. Modular curves 

Fix an integer > 1; in our later application, we will take A^ to be a prime i. In §3.1, we recall 
the Galois theory of the field of modular functions of level N. In §3.2, we define modular curves 
in terms of their functions fields. We take an unsophisticated approach to modular curves and 
develop what we need from Shimura’s book [Shi94]; it will be useful for reference in future work. 
Alternatively, one could develop modular curves as in [DR73, IV-3]. 

3.1. Modular functions of level N. The group SL 2 (Z) acts on the complex upper half plane f) 
via linear fractional transformations, i.e., 7 *(r) = (ar + h)/{cT + d) for 7 = (“ ^) £ SL 2 (Z) and 
r G [). Let r(A^) be the congruence subgroup consisting of matrices in SL 2 (Z) that are congruent 
to I modulo N. The quotient r(A^)\i^ is a Riemann surface and can be completed to a compact 

and smooth Riemann surface Xn. Let r be a variable of the complex upper half plane. 

Every meromorphic function / on has a ^-expansion here the Cn are complex 

numbers which are 0 for all but finitely many negative n and := We define JGv to be 

the field of meromorphic functions on Xj\f whose (^-expansion has coefficients in Q{Cn), where is 
the A^-th root of unity example, Xi = Q(j) where j = j{T) is the modular j-invariant 

with the familiar expansion 

j = q-^ + 744 + 196884^ + 21493760^2 + 864299970g^ + .... 

For each d G (Z/A^Z)^, let ad be the automorphism of the field Q(Ca) for which ad{CN) = C^- 
We extend ad to an automorphism of Xn by taking a function with g-expansion to 

Yl,n^d{cn)q^^^■ We let SL 2 (Z) act on Fn by taking a modular function / G Xn and a matrix 

7 G SL 2 (Z) to / o 7 *, i.e., the function (/ o 7 *)(r) = /( 7 *(t)) where 7 * is the transpose of 7 . 

Proposition 3.1. The extension Xn o/Q(j) is Galois. There is a unique isomorphism 

On- GL2(Z/iVZ)/{±I} ^ Gal(J-w/Q(j)) 

such that the following holds for all f G Tjv- 

(a) For A G SL 2 (Z/A 1 Z), we have 6]\f{A)f = / o 7 *, where 7 is any matrix in SL 2 (Z) that is 
congruent to A modulo N. 

(b) For A = (1 °) G GL 2 (Z/A^Z), we have ^^(A)/ = ad{f). 

The field Q{Cn) is the algebraic closure ofQ inX^ and corresponds to the subgroup SL 2 (Z/A'Z)/{±/}. 

We will sketch Propostion 3.1 in §3.4. Throughout the paper, we will let GL 2 (Z/A^Z) act on Xn 
via the isomorphism 9n (with —I acting trivially). 

Remark 3.2. There are other choices for an isomorphism GL 2 (Z/A^Z)/{±/}; for example, one could 
instead replace the transpose by an inverse in (a). Our choice is explained by our application to 
modular curves. As a warning, there are several places in the literature where incompatible choices 
are made with respect to modular curves. 
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3.2. Modular curves. Let G be a subgroup of GL 2 (Z/iVZ) containing —I that satisfies det(G) = 
{ZjNZ)^. Denote by the subfield of Tn hxed by the action of G from Proposition 3.1. Using 
Proposition 3.1 and the assumption det(G) = [X/NX)^, we find that Q is algebraically closed in 

ttG 

Let Xg be the smooth projective curve with function field it is defined over Q and is 
geometrically irreducible. The inclusion of fields D Q(j) gives rise to a non-constant morphism 

-kg - Xg^ SpecQ[j] U {oo} = Pq. 

The morphism kg is non-constant and we have 

deg(7rG) = [GL2(Z/A^Z)/{±/} : G/{±I}] = [GU{'^/NX) : G]. 

We will also denote the function held of Xg by Q(Xg). A point in Xg is a cusp or a CM point 
if Kg maps it to oo or to the j-invariant of a GM elliptic curve, respectively. 

The following property of the curve Xg is key to our application; we will give a proof in §3.5. 

Proposition 3.3. Let G be a subgroup of Gh^iXjNXL) that contains —I and satisfies det(G) = 
(XjNX)^. Let E he an elliptic curve defined over Q with Je 0 {0,1728}. Then pE,N{GalQ) is 
conjugate in Gh 2 {X/NX) to a subgroup of G if and only if Je belongs to kg{Xg{Q))- 

The following lemma will be key to hnding modular curves of genus 0 with rational points. 

Lemma 3.4. Fix a modular function h G Fn — Q(j) such that J{h) = j for a rational function 
J{t) G Q{t). Let G be the subgroup of GL 2 (Z/iVZ) that fixes h under the action on Fn from 
Proposition 3.1. 

(i) The subgroup G of GL^ifX/NX') is applicable. 

(ii) The modular curve Xg has function field Q{h). In particular, it is isomorphic to Pq. 

(hi) Let E/Q be an elliptic curve with Je ^ {0,1728}. The group Pe, NiGalq) is conjugate in 
GL 2 {X/NX) to a subgroup of G if and only if jE = <7(t) for some t G QU {oo}. 

Proof. By the Galois correspondence coming from the isomorphism of Proposition 3.1, the held 
Q{h) eqnals F^ and is an extension of Q{j) of degree 

[GL2iX/NX)/{±I} : G/{±I}] = [GL2{X/NX) : G]. 

The held Q is algebraically closed in F^ = Q{h), so det(G) = {X/NX)^ by Proposition 3.1. 
Therefore, Q{h) is the function held of Xg and the held extension Q{h)/Q{j) given by j = J{h) 
corresponds to the morphism kg : Xg —)• Pq. The modular curve Xg is thus isomorphic to Pq and 
we have 7rG(AlG(Q)) = J(QU {oo}). This proves (ii). Part (hi) follows from Proposition 3.3. 

Finally, we prove that G is applicable. We have G GL 2 {X/NX) since the extension Q(/i)/Q(j) 
is non-trivial by our assumption on h. Using part (hi) and Proposition 2.2, we hnd that G contains 
an applicable subgroup. Since G GL 2 (Z/A^Z) and G contains an applicable subgroup, we deduce 
that G is applicable. □ 

If Xg has genus 0 and has rational points, then there are in fact curves EjT^ with ±/?£;^Ar(GalQ) 
conjugate to G. 

Lemma 3.5. Suppose that Xg is isomorphic to Pq; equivalently, the function field of Xg is of the 
form Q{h). We have j = J{h) for a unique J{t) G Q{t) because of the inclusion Q{h) D Q(j). 
Then for “most” u G Q (more precisely, outside a set of density 0 with respect to height), the groups 
i/ 0 £;,Af(GalQ) and G are conjugate in Gh 2 {X/NX) for any elliptic curve E/Q with j-invariant J{u). 
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Proof. Let G be the (finite) set of applicable subgroups H of GL 2 (Z/A^Z) satisfying H C G. For 
each H G G, let tth,g be the natural morphism Xh —>• Xq] it has degree [G : H] > 1. To prove 
the lemma, it suffices to show that the set S := has density 0 (with respect to 

the height) in Xg'(Q) = P^(Q). This is a consequence of Hilbert irreducibility; in the language of 
[Ser97, §9], the set S is thin and hence has density 0. □ 

3.3. The modular curve Xq{N). Let Xq{N)/Q be the modular curve X^^Ny^ where B{Ny 
is the transpose of B(N); it consists of the lower triangular matrices and is conjugate to B{N) 
in GL 2 (Z/A^Z). Let ro(A^) be the group of matrices in SL 2 (Z) whose image modulo N is upper 
triangular. A function / G Tjv belongs to Q(Ao(A^)) if and only if it has rational Fourier coefficients 
and / o 7 = / for all 7 G Fo(A^). Define the modular curve Xs{N) := where Gs{N) is the 

subgroup of diagonal matrices in GL 2 (Z/A^Z). 

Lemma 3.6. The map Q{Xq{N'^)) — Q{Xs{N)), /(r) i-s- /{t/N) is an isomorphism of fields. 
This isomorphism induces an isomorphism between the modular curves Xs{N) and Xq{N‘^) which 
gives a bijection between their cusps. 

Proof. Let Ts{N) be the group of matrices in SL 2 (Z) whose image modulo N is diagonal. The 
function field of Xs(N) then consist of the / G T)v with rational Fourier coefficients for which 
/ o 7 = / for all 7 in Ts{N). 

Define tc = (g it acts on f) by linear fractional transformation, i.e., tc*(r) = t/N. Take 
any / G Bn whose Fourier coefficients are rational. We have f o w m Q{Xs{N)) if and only if 
/ o tc o 7 = / o tc for all 7 G Ts{N). Since wTs{N)w~^ = Fo(A^^), we deduce that f o w belongs to 
Q{Xs{N)) if and only if / belongs to Q(A'o(A^^)). It is now straightforward to show that the map of 
fields is well-defined and an isomorphism. The isomorphism of function fields of course induces an 
isomorphism of the corresponding curves. That the cusps are in correspondence is a consequence of 
the map Fo(A^^)\fi —)■ F 5 (A^)\f), r —)• w^{t) = t/N being an isomorphism of Riemann surfaces. □ 

Lemma 3.7. Let rj^r) be the Dedekind eta function. 

(i) We have Q(Ao(4)) = Q{h), where h{T) = r/(r)®/7(4r)®. 

(ii) We have Q(Ao(9)) = Q(/i), where hfr) = /rfi^TY. 

Proof. This is well-known; for example see [ElkOl]. □ 


3.4. Proof of Proposition 3.1. For t £ Sj, let A,- be the lattice Zr -|- Z in C. Set ( 72 ( 7 ') = 92 {^t) 
and 93 (^ 7 ) = g 3 {Ar), and let p{z-,t) be the Weierstrass p-function relative to A.^) cf. [Sil09, §VL3] 
for background on elliptic functions. For each pair a = (ai, 02 ) G — 7?, define the function 


fair) 


92ir)g3ir) 

c/2('r)3 - 27c/3(r)2 


p(air 02 ; r) 


of the upper half plane. The function fa is modular of level N. Moreover, Proposition 6.9(1) of 
[Shi94] says that 

(3.1) BN = QijJa\aGN-^Z^-7‘^). 

For a,b G ~ Z^, we have fa = fb if and only if a lies in the same coset of Q^/Z^ as b or —b, 

cf. equation (6.1.5) of [Shi94]. So for any A G M 2 (Z) with determinant relatively prime to N, the 
function faA depends only on the image A of A in GL2(Z/A^Z)/{±1}. By abuse of notation, we 
shall denote faA by faA- 

By Theorem 6.6 of [Shi94], there is a unique isomorphism 


On: GL2(Z/iVZ)/{±/} Gal(.Fv/Q(i)) 

such that 0Af(^)/a = faA^ for all A G GL 2 (Z/A^Z)/{±/} and a G — Z^; we have added the 

transpose so the map is a homomorphism (and not an antihomorphism). 
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Fix any 7 G SL 2 (Z) and let A G SL 2 (Z,/NZ) be its image modulo N. For any a G N~^7? — Z^, 
the function fa o 7 * agrees with fa.^t = 9^{A)fa by equation (6.1.3) of [Shi94]. Using (3.1), we 
deduce that 6 ]\f{A)f = / o 7 * for all / G J^n', this shows that (a) holds. 

Now take integer d relatively prime to N and let A be the image of (g D) in GL 2 (Z/A^Z). Take 
any a G — Z^; we have a = {r/N, s/N) with r,s Since fa = ft when a = b (mod Z^), 

we may assume that 0 < r < A^. We have Oi\j{A)fa = faA^ = f{r/N,ds/N)- By equation (6.2.1) of 
[Shi94], we have 

(27r)-2p(air + a2;r) = - 1/12 + 2^^°° nq^il - 

* ^n=\ 

- YT 1 • nq^/{l - q^); 

applying ad to this series gives the same thing with s replaced by ds. The Fourier coefficients of the 
expansion of g 2 {T)/ 93 {t) are all 7 r“^ times a rational number. Therefore, ad{fa) = <^d{f{r/N,s/N)) 
equals f(r/N,ds/N) = faA^- Using (3.1), we deduce that 6 ]y{A)f = ad{f) for all / G Tjy; this shows 
that (b) holds. 

This explains the existence of an isomorphism 61 ^ as in the statement of Proposition 3.1. The 
uniqueness if immediate since GL 2 (Z/iVZ) is generated by SL 2 (Z/A^Z) and matrices of the form 
(JO). Theorem 6.6 of [Shi94] implies that Q{Cn) is the algebraic closure of Q in Tn and that 
On{A)Cn = 

3.5. Proof of Proposition 3.3. We first construct the inverse of Ojsf using elliptic curves; we shall 
freely use definitions from §3.4. Let E be an elliptic curve defined over an algebraically closed field 
k of characteristic 0. Take any non-zero Wtorsion point P G E{k). If P = (xo,yo) with respect 
to some Weierstrass model = 4a:^ — C 2 X — C 3 of E/k^ define hE{P) := £ 203 /( 0 ! — 27o|) • xg. If 
jE ^ {0,1728}, then one can show that hE{P) does not depend on the choice of model. 


Let £ be the elliptic curve over Pi = Q{j) defined by the Weierstrass equation 


(3.2) 


= 42-3 


27j 

j- 1728'' 


27j 

j - 1728’ 


it has ^-invariant j. Fix an algebraic closed field K that contains J-)v 5 QU) and let be the 
Wtorsion subgroup of £{K). 


Lemma 3.8. There is a basis {^ 1 ,^ 2 ) of the "L!NTj-module £\N] sueh that hsirPi + SP 2 ) = 
f(r/N,s/N) for all {r,s)eI?-NI?. 

Proof. Let Kq be the extension of Pn generated by the functions g 2 {'r), gsir), pfr/N] r), p'{t/N;t), 
p{1/N;t) and p'{1/N;t). We may assume that K D Kq. Let E be the elliptic curve over Kq de¬ 
fined by = 4x^ — g 2 {T)x — 53 (r); its ^-invariant is j = j(r). The curves E and £ are isomorphic 
over K since they both have j-invariant j. Since j ^ {0,1728}, it suffices to prove the lemma for 
E instead of £. 

Define the pairs 

Pi := {p{t/N] t), p'{t/N-, t)) and P 2 := (p(l/iV; r), p'(l/A^; r)). 

We claim that Pi and P 2 form a basis of the Z/A^Z-module of Wtorsion in E{K). To prove the 
claim it suffices to prove the analogous results after specializing the coefficients of E and the entries 
of Pi and P 2 by an arbitrary rg G f) (since the claim comes down to verifying certain polynomial 
equations whose variables are the coefficients of the model of E and the entries of the points). So 
fix an arbitrary rg G f). Specializing the model of E at rg gives an elliptic curve Pro over C defined 
by — g 2 {rQ)x — fl' 3 (rg). From Weierstrass, we know that the map 

C/Aro Pro(C), z (p(z;rg),p'( 2 :;rg)), 
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with 0 mapping to the point at infinity, gives an isomorphism of complex Lie groups. In particular, 
the points Ppro = (p(ro/iV; tq), p'(ro/iV; tq)) and P 2 ,to = give a basis for 

the A^-torsion in Ej-q^C). This is enough to prove our claim. Moreover, we have + sP 2 ^to = 

{p{r/N ■ To + s/A^; To), p'{r/N ■ tq + s/N; tq)) for all (r, s) G Therefore, 

hE^o^rPi + SP 2 ) = g2{To)g?,{ro)/{g2{rof - 27g‘i{Tof) ■ p{r/N ■ tq + s/N;tq) = f(r/N,s/N){To)- 

for all (r, s) G Z'^—NZ. Since this holds for all tq G 1), we deduce that hE{rPi+sP 2 ) = f{r/N,s/N)- ^ 

Let pN ■ Gal(iL/Q(j)) —)• GL 2 (Z/A^Z) be the representation describing the Galois action on T[A^] 
with respect to the basis {^ 1 ,^ 2 } of Lemma 3.8. The fixed field of the kernel of Gal(iL/Q(j)) 
GL 2 {Z/NZ) —)• GL 2 {Z/NZ)/{±I} is generated by the x-coordinates of the non-zero points in T[A^]. 
By (3.1) and Lemma 3.8, the extension of Q{j) is generated by the x-coordinates of the non-zero 
points in S[N]. Therefore, the representation induces an injective homomorphism 

(3.3) Pe: Gal{PN/Q{j)) GL2(Z/iVZ)/{±/}. 

In fact, (3.3) is an isomorphism since the groups have the same cardinality by Proposition 3.1. 

Lemma 3.9. The homomorphism Tn isomorphism. Moreover, the inverse of Tn ^he 

homomorphism On'- GL 2 (Z/A^Z)/{±/} —)• Gal(JGv/Q(i))- 

Proof. Take any a G Gal(A'/Q(j)) and set a := cr|_F^. There are integers a,b,c,d G Z such that 
(7{Pi) = aPi + CP 2 and < 7 (^ 2 ) = bPi + dP 2 , so PN{cr) = A, where A G Gl-i 2 {Z/NZ) is the image of 
(“ ^) modulo N. Therefore, PAr(^) is the class of A in GL 2 (Z/A^Z)/{±/}. We need to show that 
6n{A) = a. 

Take any pair of integers (r, s) G Z^ — NZ"^. We have 

a{rPi + SP 2 ) = ra{Pi) + sa{P 2 ) = {ra + sb)Pi + {rc + sd)P 2 . 

Gomparing x-coordinates and using Lemma 3.8, we find that d{f(^r/N,s/N)) = <^{f[r/N,s/N)) is equal 
to f{^{ra+sb')/N,{rc+sd)/f{r/N,s/N)A^ which is 0Ni^ATjfj n/N) from §3.4. Since the extension 
Pn/QU) is generated by the functions fa with a gZ^ — NZ^, we deduce that On{A) = a. □ 

Define the Q-variety 

U:=A}^- {0,1728} = SpecQ\j,j-\ {j - 1728)"^]; 

note that we are now viewing j as simply a transcendental variable. The equation (3.2) defines a 
(relative) elliptic curve tt: —>■ [7. The fiber of S’ ^ U over the generic fiber of U is the elliptic 
curve £/Q{j). 

Let rj be the geometric generic point of U corresponding to the algebraically closed extension K 
of Pn. Let S[N] be the Ai-torsion subscheme of S. We can identify the fiber of S[N] U at rj 
with the group £[N]. Let 'Ki{U,rj) be the etale fundamental group of U. We can view S[N] as a 
rank 2 lisse sheaf of Z/A^Z-modules U and it hence corresponds to a representation 

qn'. M{U,ri) -G Aut(T[A^]) ^ GL 2 (Z/iVZ) 

where the isomorphism uses the basis {i-i,P 2 } of Lemma 3.8. Taking the quotient by the group 
generated by —I, we obtain a homomorphism 

-Qn'. vri(t/,r/) ^ GL 2 (Z/A^Z)/{±I}. 

Note that the representation Gal{K/Q{j)) —>• GL 2 (Z/A^Z)/{±/} coming from factors through 
the homomorphism pjy. So by Proposition 3.1 and Lemma 3.9, the representation -g^f is surjective 
and satisfies ’PNi’^ii^'q)) — SL 2 (Z/A^Z)/{±/}. 
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Now take any subgroup G of GL2(Z/A^Z) that satisfies —I G G and det(G) = {'LjN'L)^ . Using 
the group G/{±/} corresponds to an etale morphism tt: Yq ^ U. The smooth projective 
closure of Yq is thus Xq and the morphism Xq —)• Pq arising from vr is simply ttg. 

Take any rational point u G U(Q) = Q — {0,1728}. Viewed as a morphism SpecQ — U, the 
point u induces a homomorphism rt* : GalQ —)• 'Ki{U); we are suppressing base points so everything 
is uniquely dehned only up to conjugacy. Composing n* with we obtain a homomorphism 
j3u'- GalQ —)• GL 2 (Z/VZ)/{±/}. Observe that the group /3,((GalQ) is conjugate to a subgroup of 
G/{±/} if and only if u lies in '/ri(YG'(Q)) = TTciXciO.)) — {0,1728, oo}. 

The fiber of (o’ ^ C/ over u is the elliptic curve (f^/Q obtained by setting j to u in (3.2). Compos¬ 
ing pg^^N'- GalQ —>■ GL 2 (Z/VZ) with the quotient map GL 2 (Z/VZ) —)■ GL 2 (Z/VZ)/{±/} gives a 
homomorphism that agrees with Pu up to conjugation. Since —I G G, we find that p^^^Ar(GalQ) is 
conjugate in GL2(Z/VZ) to a subgroup of G if and only if u G ttg(Xg (Q) ). 

Finally, let E/Q be any elliptic curve with j-invariant u. The curve (o„/Q also has j-invariant u. 
As noted in the introduction, since E and are elliptic curves over Q with common j-invariant 
u ^ {0,1728}, the groups ±pE,N{GalQ) and ±/ 0 ^^_ 7 v(GalQ) must be conjugate. This completes the 
proof of Proposition 3.3. 


4. Classification up to a sign 

In this section, we prove the parts of the theorems of §1 that involve the groups ±/ 9 £;^£(GalQ) 
for an elliptic curve E/Q. In the notation of §2, the group ±/ 9 £;^£(GalQ) is either applicable or is 
the full group GL 2 (F£). We consider the primes i separately and keep the notation of the relevant 
subsection of § 1 . 

One of the main tasks is to construct modular curves of genus 0. We will do this by finding 
functions /i G T} — Q{j) such that j = J{h) for some J G Q(t). Let H be the subgroup of GL 2 (F£) 
consisting of elements that fix h under the action from Proposition 3.1. By Lemma 3.4, the group H 
is an applicable subgroup of GL 2 (F£). Furthermore, Xh has function field Q(/i) and the morphism 
-kh '■ Xh —)• Pq is described by the inclusion Q(/i) D Q(j). So if E/Q is a non-CM elliptic curve, then 
/ 9 E^£(GalQ) is conjugate to a subgroup of H if and only if Je belongs to 7 rH{XH{Q)) = J(QU {oo}). 

We will need to recognize H as a conjugate of one of our applicable subgroups Gi of GL 2 (F^). 
The degree of tth, which is the same as the degree of J{t), is equal to the index [GL 2 (F^) : H]; this 
observation will immediately rule out most candidates. We will also make use of Proposition 3.3; 
observe that the set tth{Xh{Q)) depends only on the conjugacy class of H. 

Most of this section involves basic algebraic verifications (which are straightforward to check 
with a computer, see the link in § 1.10 for many such details); much of the work, which we will not 
touch on, is finding the various equations in the hrst place. 

4.1. i = 2 . Fix notation as in §1.1. Up to conjugacy, Gi, G2 and G 3 are the proper subgroups of 
GL 2 (F 2 ). 

• Dehne the function 

/ii(t) := 167/(2T)Vh(T/2)^ = 16(g^/2 -7 8g -7 I92q^ + 718^^/^ + ■■■). 

By Lemmas 3.6 and 3.7(i), we have Q{Xs{ 2 )) = Q{hi). We have Cs{ 2 ) = Gi, so Q(Xgi) = 
Q{hi). The extension Q{hi)/Q{j) has degree 6 , so there is a unique rational function J{t) G 
Q{t) such that j = J{hi). We have J{t) = fi{t)/f2{t) for relatively prime /i ,/2 G Q[t] of 
degree at most 6 . Expanding the g-expansion of j/ 2 (hi) —/(h-i) = J{hi)f 2 {hi) —fi{hi) = 0 
gives many linear equations in the coefficients of /i and f2- Using enough terms of the 
g-expansion, we can compute the coefficients of /i and /2 (they are unique up to scaling /i 
and /2 by some constant in Q^). Doing this, we found that Ji{hi) = j. 

• Dehne /12 := h\/{hi + 1 ). Since J2{t^/{t + 1)) = we have J2{h2) = j- 
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• Define /is := F{hi) where F{t) = (—16/^ — 24/^ + 24/ + 16)/(/^ +1 ). Since J‘i{F{t)) = Ji(/), 
we have Jsih^) = j. 

For each integer 1 < z < 3, let Hi be the subgroup of GL 2 (F 2 ) that fixes hi. By Lemma 3.4, Hi 
is an applicable subgroup of GL 2 (F 2 ) with index equal to the degree of Ji{t). By comparing the 
degree of Ji{t) with our list of proper subgroups, we deduce that Hi is conjugate to Gi in GL 2 (F 2 ). 
Theorem 1.1 now follows from Lemma 3.4(iii); we can ignore t = oo since Ji(oo) = oo. 


4.2. i = 3. Fix notation as in §1.2. Up to conjugacy, the groups Gi with 1 < i < 4 are the 
applicable subgroups of GL 2 (F 3 ). 

• Define the function hi := 1/3 • r}{T /3)^ . By Lemmas 3.6 and 3.7(ii), we have 
Q(Xs(3)) = Q{hi). We have Cs{3) = Gi, so Q(Xgi) = Q(/ii). The extension Q(/ii)/Q(j) 
has degree 12, so there is a unique rational function J{t) G Q{t) such that j = J{hi). We 
have J{t) = fi{t)/f 2 {t) for relatively prime /i ,/2 G Q[t] of degree at most 12. Expanding 
the ^-expansion of j/ 2 (/ii) — f{hi) = J{hi)f 2 {hi) — fi{hi) = 0 gives many linear equations 
in the coefficients of fi and / 2 . Using enough terms of the g-expansion, we can compute 
the coefficients of /i and /2 (they are unique up to scaling /i and /2 by some constant in 
Q^). Doing this, we found that Ji{hi) = j. 

• Define /i 2 = Fi{hi) where Fi{t) = + 3/ + 3)/t. Since J 2 {Fi{t)) = Ji(/), we have 

J 2 {h 2 ) = j- 

• Define /is = F 2 {hi) where F 2 {t) = /(/^+3/+3). Since Js(F 2 (t)) = Ji(/), we have J^ih^) = j. 

• Define /14 = F^{h 2 ) where F 3 (/) = 3(/ + 1)(/ — 3)/t. Since J/i{F^{t)) = J 2 (/), we have 
JA{hi) = j. 

Fix an integer 1 < i < 4, and let Hi be the subgroup of GL 2 (Fs) that fixes hi. By Lemma 3.4, 
we find that Hi is an applicable subgroup and the morphism vr//,: Xni —>• Fq is described by the 
rational function Ji{t). The index [GL 2 (Fs) : Hi\ agrees with the degree of Ji{t). By comparing 
the degree of Ji{t) with our list of applicable subgroups, we deduce that Hi is conjugate to Gi in 
GL 2 (Fs). 

Theorem 1.2(ii) now follows from Lemma 3.4(iii); we can ignore t = 00 since Jj(oo) = 00 . A 
computation shows that if Lf is a proper subgroup of Gi satisfying ±H = Gi, then i G {1,3} and 
H is one of the groups Hi^j] this proves Theorem 1.2(i). 


4.3. i = 5. Fix notation as in §1.3. Up to conjugacy, the applicable subgroups of GL 2 (F 5 ) are the 
groups Gi with 1 < i < 9. Recall that the Rodgers-Ramanunjan continued fraction is 


r(r) := ■ 


1 q 


1 + 1 + 1 + 1 + 1 + 

The function 

/ii(t) := l/r(r) = + q - q^ + q^ + q^ - q'^ - 2q^ + 2g^° + 2 q^^ + • • •) 


is a modular function of level 5 and satisfies Ji(/ii) = j‘, we refer to Duke [Duk05] for an excellent 
exposition. An expression for /ii(t) in terms of Klein forms can be found in [CC06]. 

Set w := (l + v^)/2 G Q(C 5 )- 

• Define the function /12 = /ii — 1 — I// 11 . We have J 2 {t — 1 — 1/t) = Ji{t), so J 2 (/i 2 ) = j- 
(As noted in equation (7.2) of [Duk05], /12 equals r]{T/5)/r]{5T).) 

• Define /13 = Fi(/i 2 ) where 


Flit) 


(—3 + w)t — 5 
t + {3 — w) 


We have J 3 (Fi(/)) = J 2 (/) and hence Jsih^) = j. 

• Define /14 = /12 + 5 //i 2 . We have J 4 (/ + 5/t) = J 2 {t) and hence J^ihi) = j. 
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• Define = h\. We have J5{t^) = Ji{t) and hence = j. 

• Define /ig = F 2 {hh) where 


m) 


-{w - ift + l 
t + {w — 1 )^ 


We have jQ{F 2 {t)) = J5{t) and hence J^ih^) = j. (In the notation of [Duk05, § 8 ], we have 

b = K.) 

• Define /17 = F^{h'i) where 


m) = 


+ lOt^ + 25t + 25 
2F + 10f2 + 25t + 25 ■ 


We have J 7 (F 3 (t)) = J 3 {t) and hence J 7 {hj) = j. 

• Define — 11 — . We have J 3 {t — 11 — t~^) = J 5 {t) and hence Jsihg) 

noted in equation (7.7) of [Duk05], /ig equals (??(7‘)/??(5t))®.) 

• Define hg = i 7 i(/i 4 ) where 


j. (As 


m) 


{t + 5)(f^ - 5) 
F + 5t + 5 


We have Jg{F4{t)) = Ji{t) and hence Jg{hg) = j. 

Fix an integer 1 < i < 9. Let Hi be the subgroup of GL 2 (F 5 ) that fixes hi. By Lemma 3.4, 
we find that Hi is an applicable subgroup and the morphism vr/f.: A 77 . —>• Pq is described by the 
rational function Ji{t). 


Lemma 4.1. The groups Hi and Gi are conjugate in GL 2 (F 5 ) for each 1 < f < 9. 


Proof. The index [GL 2 (F 5 ) : Hi] agrees with the degree of Ji{t). By comparing the degree of Ji{t) 
with our list of applicable subgroups, we deduce that Hi is conjugate to Gi in GL 2 (F 5 ) for all 
zG {1,4, 7, 8 ,9}. 

The groups H^ and Hg are not conjugate since one can check that the image of P^(Q) = Qujoo} 
under J5{t) and Jg{t) are different. The groups H^ and Hq have index 12 in GL 2 (F 5 ) and are not 
conjugate, so they are conjugate to G 5 and Gq (though we need to determine which is which). The 
elliptic curve given by the Weierstrass equation + (1 — t)xy — ty = x^ — tx"^ has j-invariant Jg{t) 
and the point (0,0) has order 5. Therefore, Hq is conjugate to Gg and thus H^ is conjugate to G 5 . 

The groups H 2 and H 3 are not conjugate since one can check that the image of P^(Q) = Qujoo} 
under J 2 {t) and Jsit) are different. The groups H 2 and H 3 have index 30 in GL 2 (F 5 ) and are not 
conjugate, so they are conjugate to G 2 and G 3 (though we need to determine which is which). Since 
h^ = F3{h3) and T 3 (f) belongs to Q{t), we find that H3 is a subgroup of Hj. We already know 
that Hi is conjugate to Nns{5) and one can check that G 2 = Cs{f)) is not conjugate to a subgroup 
of Nns{5). Therefore, H 3 is conjugate to G 3 and thus H 2 is conjugate to G 2 . □ 


Theorem 1.4(ii) now follows from Lemma 3.4(iii); we have Ji{oo) = 00 for i ^ {3,7} and we 
can ignore the values Jsioo) = 0 and ^ 7 ( 00 ) = 8000 since they are the j-invariants of CM elliptic 
curves. A direct computation shows that if 77 is a proper subgroup of Gi satisfying ±77 = Gi, then 
i G {1,5,6} and 77 is one of the groups Tfjj; this proves Theorem 1.4(i). 


4.4. 7 = 7. Fix notation as in §1.4. Up to conjugacy, the applicable subgroups of GL 2 (F 7 ) are the 
groups Gi with 1 < z < 7 from §1.4 and the groups: 

• Let Gg be the subgroup of GL 2 (F 7 ) consisting of matrices of the form ± (g °). 

• Let Gg be the subgroup of GL 2 (F 7 ) consisting of matrices of the form (0 ±a)- 

• Let Gio be the subgroup of GL 2 (F 7 ) generated by (2 ” 0 ^) (g _?i). 

• Let Gii be the subgroup Gs{7) of GL 2 (F 7 ). 
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• Let Gi 2 be the subgroup of GL 2 (F 7 ) generated by (} and (J _?i). 

For i = 8 ,9,10,11 and 12, the index [GL 2 (F 7 ) : Gi] is 168, 168, 84, 56 and 42, respectively. 

The Klein quartic is the curve X in Pq defined by the equation x^y + y'^z + z'^x = 0; it is a 
non-singular curve of genus 3. The relevance to us is that X is isomorphic to the modular curve 
X(7) := Xcg,] we refer to Elkies [Elk99] for a lucid exposition. In §4 of [Elk99], Elkies defines a 
convenient basis x, y and z for the space of cusp forms of r(7) which satisfy the equation of the 
Klein quartic and have product expansions 

OO 

n=l n >0 

n=dino mod 7 

where (e,a,no) is (—1,4,1), (1,2,2) or (1,1,4) for x, y or z, respectively. The coordinates (x : y: z) 
then give the desired isomorphism X{7) —)• X. 


Define 

/i4 := -(y^z)/x3 = q-^+3 + 4q + 3q^ - hq^ - 7q^ + ... ■ 
it is a modular function of level 7. Define hj := Fi[h/^) where 


Erom equations (4.20) and (4.24) of [Elk99], with a correction in the sign of (4.23) of loc. cit., we 
have Jjihj) = j. Since J 7 {Fi(t)) = we have J 4 (/i 4 ) = j. 

Define hs := ^ 2 ( 114 ) and /15 := ^ 3 (^ 14 ), where 


^2(t) 


/3t-(/3-l) 
t —13 


and E 3 {t) 


t-l 

7 t - (7 - 1 ) 


with /? = 4 -I- 3 C 7 + 3^7 ^ + C7 + C7 ^ and 7 = C7 + C7 + C7 + C7 + 1- Since J 3 (F 2 (t)) = J 4 (t) and 
JbiFsit)) = we have Jsihs) = j and J 5 (/i 5 ) = j. 


Eor i G {3,4,5,7}, let Hi be the subgroup of GL 2 (F 7 ) that fixes hi. We have shown that 
Ji{hi) = j. By Lemma 3.4, we find that Hi is an applicable subgroup and that the morphism 
-KHi '■ Xui Pq is described by the rational function Jj (t). 

Lemma 4.2. The groups Hi and Gi are conjugate in GL 2 (F 7 ) for all i G {3,4, 5,7}. 

Proof. The index of Hi in GL 2 (F 7 ) agrees with the degree of Ji{t) which is 24 or 8 if i G {3,4,5} 
or 7 = 7, respectively. By our list of applicable subgroups, we deduce that Hj is conjugate to Gj in 
GL 2 (F 7 ). The groups H^, H^ and H^ are not conjugate in GL 2 (F 7 ) (since one can show that the 
images of P^(Q) = Q U { 00 } under J 3 , J 4 and J 5 are pairwise distinct). By our list of applicable 
subgroups, the groups H^,, 774 and H^ are conjugate to the three subgroups G 3 , G 4 and G 5 ; we 
still need to identify H 3 , with G 3 , etc. 

The modular function /14 G TV is a Laurent series in q and has rational coefficients. Using 
Proposition 3.1, this implies that H 4 contains the group of matrices of the form ± (} ^) in GL 2 (F 7 ). 
Therefore, H^ must be conjugate to G 4 in GL 2 (F 7 ). The elliptic curve given by the Weierstrass 
equation -|- (1 + 1 — t^)xy + (t^ — t^)y = -|- {t^ — t^)x^ has j-invariant J 3 (t) and the point ( 0 , 0 ) 

has order 7, so H^ is conjugate to G 3 . Therefore, H^ is conjugate to G 5 . □ 

Eollowing Elkies ([Elk99, p. 68 ]), we multiply the equation of the Klein curve to obtain (x^y + 
y^z + z^x)(x^z-|-z^y-|-y^x) = 0. Noting that the left hand side is a symmetric polynomial in x, y and 
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z, one can show that + S3(sf — 5sfs2 + + Tsfss) = 0 where si = x + y + z, S2 = xy + yz + zx 

and S3 = xyz. We now deviate from Elkies’ treatment. Divide by sf s| and rearrange to obtain 

2 2 /c2^2 o2 ,2 2 2 

+(i) .^-5i.^ + ^ + 7 = 0. 

VS1S3/ VS2/ S1S3 S 2 S1S3 S1S3 

We thus have v"^ + (/i| — 5/i2 + l)u + 7 = 0 , where 

h 2 := S?/S2 = + 2 + 2 gV 7 + ^2/7 ^ 2 ^ 3/7 ^ 3^4/7 ^ 4^5/7 ^ 5^6/7 ^ ^ g^ 8/7 ^ . 

and V := s|/(siS3) are modular functions. We claim that 

( 4 . 1 ) /17 + (/12 — 4/12 + 3/12 + l)((/i2 — 5/12 + l)'u + 7 ) = 0 . 

This can be verified algebraically: In the left-hand side of ( 4 . 1 ), replace hy by Fi{—y'^z/x^), /12 
by (x + y + z)^/{xy + yz + zx), and v by {xy + yz + zx)"^ j ((x + y + z)xyz)', the numerator of the 
resulting rational function is divisible by xy^ + yz^ + zx'^. 

Completing the square in the equation + (/i^ — 5/i2 + l)v + 7 = 0 , we have 

( 4 . 2 ) = hi- 10 /ii + 27 hl - 10^2 - 27 , 
where w '.= 2 v + {h^ — 5/i2 + 1 ). From ( 4 . 1 ), we find that 

( 4 . 3 ) hj = \{h\ — 4 /i 2 + 3 /i 2 + l)((/i2 — 10 /i 2 + 27 /i| — 10 /i 2 — 13 ) — {h^ — 5 /i 2 + l)rc). 

We have j = JT{h'r), so ( 4 . 2 ) and ( 4 . 3 ) imply that j can be written in the form a(/i2) + I 3 {h 2 )w for 
rational functions a{t) and I 3 {t). A direct computation shows that a{t) = J2{t) and / 3 (f) = 0 , and 
hence +2(^2) = j- 

Let H2 be the subgroup of GL2(IF7) that fixes /12. We have +2(^2) = j, so Lemma 3.4 implies 
that H2 is an applicable subgroup and that the morphism 'KH2 ■ ^H2 Pq is described by the 
rational function J2{t). The index of H2 in GL2(F7) is 28 since it agrees with the degree of J2{t)- 
By our list of applicable subgroups, we deduce that H2 is conjugate to G2 in GL2(F7). 


Let Hu be the subgroup of GL 2 (F 7 ) that fixes h 2 and w. The group Hu is an index 2 subgroup 
of H 2 since the extension Q{h 2 ,w)/Q{h 2 ) has degree 2. The group Hu contains Gg since Q{h 2 ,w) 
is contained in Q(x/z, y/z) which is the function field of X{7); in particular, Hu is applicable. From 
our classification of applicable subgroups, we find that Hu is conjugate to Gu- The modular curve 
Acii thus has function held Q{h 2 ,w) and is hence isomorphic to the smooth projective curve over 
Q with affine model 

(4.4) y2 ^ - lOx^ + 27x^ - lOx - 27. 

The only rational points for the smooth model of (4.4) are the two points at inhnity (one can show 
that it is isomorphic to the quadratic twist by —7 of the curve F '74 from §1.9, and that this curve 
has only two rational points). Using that + 2 ( 00 ) = 00 , we hnd that the two rational points of 
Xhii, and hence of Xq^^, are cusps. Therefore, there is no non-GM elliptic curve F/Q for which 
/ 3 £;j(GalQ) is conjugate to a subgroup of Gu; the same holds for the group Gg since Gg C Gu- 

Now consider the subfield K := Q(/i 2 , rc/V—7) of + 7 . Let Hi be the subgroup of GL 2 (F 7 ) that 
fixes K. From the inclusions K D Q(/i 2 ) 7^ Q(j) and (4.2), we find that K is the function held of 
the geometrically irreducible curve 

(4.5) - 7y‘^ = x‘^ - lOx^ + 27x‘^ - lOx - 27 

dehned over Q (with {x,y) = {h 2 ,w/y/—7)). The curve Xh^ is dehned over Q since Q is al¬ 
gebraically closed in K. The only rational points of the smooth projective model of (4.5) are 
{x,y) = (5/2, ±1/4) (one can show that it is isomorphic to the curve F 74 from §1.9, and that 
this curve has only two rational points). These two rational points on Xhi he over the j-invariant 
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J 2 ( 5 / 2 ) = 3^ • 5 • ji^. This shows that for an elliptic curve -E/Q, / 9 ^^ 7 (GalQ) is conjugate to a 
subgroup of ii\ in GL 2 (F 7 ) if and only if = 3^ • 5 • 7^/2^. Since Xh^ has a rational point that is 
not a cusp, the group Hi must be applicable and not conjugate to Gn. The group Hi is an index 
2 subgroup of H 2 since [Q(/i 2 , ui/-\/^) : Q(/i 2 )] = 2. From our description of applicable groups, we 
deduce that Hi is conjugate to Gi. 

Remark 4.3. The rational points on Xh^ were first described by A. Sutherland in [Sutl 2 ]. An 
elliptic curve Fl/Q with j-invariant 3^ • 5 • 7^/2^ has the distinguished property of not having a 
7-isogeny, yet its reduction at primes of good reduction all have a 7-isogeny. 

From equation (4.35) of [Elk99], the modular curve A^^(7) := Xq^ has function field of the form 
Q(x) and the morphism down to the j-line is given by Jq{x)] note that there is a small typo in the 
numerator of equation (4.35) of [Elk99] though the given expression for j — 1728 is correct. 

Lemma 4.4. The rational points of the modular curve Xc ^2 CM. 

Proof. The fiber in A+,(7) over j = 1728 is the (non-reduced) subscheme given by 

(2x^ - Ux^ + 21x^ + 28x + 7){x- 3)((x^ - 7x^ + - 7x + 7){x^ - 14x^ + 56a; + 21))^ = 0; 

this can be found by factoring Jq{x) — 1728. Define the modular curve Xns{7) ■= One can 

show that the morphism Xns{7) —)■ A^^(7) is ramified at precisely four points lying over j = 1728. 
Since it is defined over Q, these four ramification points are the ones given by 2a;'^ — 14a:^ + 21a;^ + 
28a: + 7 = 0. Therefore, Xns{7) is defined by an equation 

= c(2x^ - 14x3 + 21x2 + 28x + 7) 

for some squarefree c G Z. 

We claim that c = —1. Consider an elliptic curve E/Q with j-invariant —2^^. The value x = 1 
is the unique rational solution to J(x) = —2^^. Setting x = 1, we have = 44c. Therefore, K = 
Q(-\/llc) is the unique quadratic extension of Q for which ^^^(Galx) C C'„s(7). Since Je = —2^^, 
the curve E has CM by Q(\/—H) and hence ^^^(GalQ^y^jj)) = Cns{7) and / 9 _E, 7 (GalQ) = Nns{7)-, 
see §7. Therefore, K = Q(\/—11) and hence c = — 1 as claimed. (The above argument comes from 
Schoof.) 

Define the subfield L = Q{x,v) of Ey where v := yf\/—7] we have 
(4.6) 7^2 = 2x'‘ - 14x3 + 21x2 + 28x + 7. 

Let G be the subgroup of GL 2 (F 7 ) that hxes L; it is an index 2 subgroup of Gq = Ai„s(ll) since 
L/Q{x) has degree 2. The held Q is algebraically closed in L since L/Q{x) is a geometric extension. 
Therefore, det(G) = F^. There are only two index 2 subgroups of Gq with full determinant; they 
are G 12 and Gns{7)- The group G is thus G 12 since Gns{7) corresponds to the held Q{x,y). 

Therefore, Xgi 2 has function held Q(x,?;) with x and v related by (4.6). The smooth projective 
curve dehned by (4.6) has genus 1 and a rational point (x, v) = (0,1); it is thus an elliptic curve. A 
computation shows that this elliptic curve is isomorphic to the curve Ejfi of §1.9. The curve Ey ^2 
has only two rational points, so (x,u) = ( 0 ,± 1 ) are the only rational points of the curve dehned 
by (4.6). The lemma follows since +6(0) = 0. □ 

If E/Q is a non-CM elliptic curve. Lemma 4.4 shows that / 9 E, 7 (GalQ) is not conjugate to a sub¬ 
group of Gi 2 . The same holds for Gg and Gio since they are both subgroups of G 12 . 

Suppose that H is a proper subgroup of Gi satisfying EH = Gi for a hxed l<i<7. If 77 ^!, 
then i G {3,4, 5,7} and H is one of the groups Hiy. If i = 1, the H is either Hi i or another 
subgroup that is conjugate to Hiy in GL 2 (F 7 ). This completes the proof of Theorem 1.5(i) and 
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(ii); we can ignore t = oo for 2 < i < 7 since Ji(oo) is either oo or the j-invariant of a CM elliptic 
curve. 

4.5. i = 11. Fix notation as in §1.5. Up to conjugacy, the group GL 2 (lFii) has four maximal 
applicable subgroups: il(ll), A^s(ll), .^ns(ll) and a group Hq^ whose image in PGL 2 (Fii) is 
isomorphic to 64 . 

4.5.1. Exceptional case. The curve ^64 (11) := has no rational points corresponding to a 

non-CM elliptic curve; it is isomorphic to an elliptic curve which has only one rational point 
[Lig77, Prop. 4.4.8.1] and this point corresponds to an elliptic curve with CM by 

4.5.2. Split case. The curve X+(ll) := X;Ys(ii) has no rational points corresponding to a non-CM 
elliptic curve; see [BPRll] for a more general result. Therefore, there are no non-CM elliptic curves 
E/Q such that / 9 E/(GalQ) is conjugate to a subgroup of A^s(ll). 

4.5.3. Non-split case. The modular curve X+,(ll) := Xg^, = has genus 1. Halberstadt 

[Hal98] showed that the function field of X+^(ll) is of the form K := Q{x,y) with y‘^ + y = 

— x'^ — 7x 10 such that the inclusion Q(j) C Q(x, y) is given by j = J{x, y). Therefore, if U/Q 
is a non-CM elliptic curve, then / 9 _E,ii(GalQ) is conjugate to a subgroup of A^„s(ll) if and only if 
jE = J{P) for some point P S T(Q). We only need consider P ^ O since, as noted in [Hal98], 
J{0) is the j-invariant of a CM elliptic curve. 

Let G 4 be the subgroup of G 3 consisting of 5 ^ G G 3 = A^ns(ll) such that g G C'ns(ll) and 
det( 5 r) G ox g ^ G„s(ll) and det(fi() ^ 

Lemma 4.5. The modular curve has no rational points. 

Proof. Define the modular curve X„s(ll) := Xc^^^n)- Proposition 1 of [DFGS14] shows that 
X„<j(ll) can be defined by the equations y'^ -\-y = x^ — x'^ — 7x-\-W and = — (4x^ -|-7x^ — 6x-|-19), 
where K = Q{x,y). 

Define the field L := K{v) with v = u/y/—ll. We have L C since ^J—11 G Q(Cii)- Let G 
be the subgroup of GL 2 (Fii) that fixes L; it is an index 2 subgroup of G 3 since L/K has degree 
2. The field Q is algebraically closed in L since it is algebraically closed in K and LIK is a 
geometric extension. Therefore, det(G) = F^j^. There are only two index 2 subgroups of G 3 with 
full determinant; they are G 4 and C'ns(ll). The group G is thus G 4 since C'„s(ll) corresponds to 
the field K{u). 

Therefore, Xq^ has function held Q{x, y, v) where y'^ y = x^ — x'^ — 7x 10 and = ll(4x^ -|- 
7x'^ — 6 a: -|- 19). We now homogenize our equations: 

(4.7) y‘^z-\-yz'^ = x^-x'^z-7xz'^-\-10z^, llv"^z = {Ax^ + 7x^z - Oxz^ + lOz^). 

Combining the two equations (4.7) to remove the x^ term, we hnd that llv'^z = {Ay‘^z -\- Ayz^ -\- 
llx^z 22xz‘^ — 21z^). Factoring off z, we deduce that the following equations give a model of Xq^ 
in P^: 

(4.8) y'^z+ yz'^ = x^ - x'^z-7xz‘^+ 10z^, llv‘^ = {Ay'^ + Ayz + llx^ + 22xz - 2lz^). 

Suppose {x,y,z,v) G P^(Q) is a solution to (4.8). If z = 0, then we have 0 = and llu^ = 4y^, 
which is impossible since 44 is not a square in Q. So assume that z = 1. We can then recover the 
equation v‘^ = ll(4x^ -|- 7x^ — 6x-|-19) which has no solutions (x, v) G Q^; it dehnes an elliptic curve 
and a computation shows that its only rational point is the point at 00 . Therefore, Xg' 4 (Q) = 0. □ 

Let E/Q be a non-CM elliptic curve for which / 9 _E,ii(GalQ) is conjugate to a subgroup of G 3 . 
Suppose that /OE,ii(GalQ) is conjugate to a subgroup of G 3 . The group G 3 has no index 2 subgroups 
H that satisfy ±H = G 3 . Therefore, / 9 _E,ii(GalQ) is conjugate to a subgroup of a maximal applicable 
subgroup of G 3 . Up to conjugacy, there are two maximal applicable subgroups of G 3 ; one is G 4 and 
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the other is a subgroup G5 of index 3 in G3. The image G5 of G5 in PGL2(Fii) has order 8 and 
is hence a 2-Sylow subgroup of PGL2(Fii). Therefore, G5 lies in a snbgronp of PGL2(Fii) that is 
isomorphic to 64 and hence G5 is conjugate to a subgroup of Hq^. However, we saw in §4.5.1 that 
/3£;,ii(GalQ) cannot be conjugate to a subgroup of This implies that /3E,ii(GalQ) is conjugate 
to a subgroup of G4 which is impossible by Lemma 4.5. Therefore, /?£;,ii(GalQ) must be conjugate 
to G3. 

4.5.4. Borel case. The modular curve -^_b(ii) is known to have exactly three rational points that 
are not cusps; they lie above the j-invariants —2^^, —11^ and —11 • 131^, cf. [BK75, p. 79]. An 
elliptic curve with j-invariant —2^^ has CM, so we need only consider the other two. 

Consider the elliptic curve E/Q defined hy y'^ + xy + y = + x‘^ — 305x + 7888; it has j- 

invariant —11^ and conductor 11^. The division polynomial at 11 of FI factors as the product of the 
irreducible polynomial f{x) = x^ — 129x^ + 800x^ + 81847x^ — 421871x — 4132831 and an irreducible 
polynomial g{x) of degree 55. Since 11 divides the degree of g{x), we find that /0£;,ii(CalQ) contains 
an element of order 11. Therefore, there are unique characters Xi:X 2 ' CalQ —?> F^^ such that with 
respect to an appropriate change of basis we have 

(4.9) 

We have X 1 X 2 = w where a;: CalQ —>• F]^^ is the character describing the Calois action on the 11-th 
roots of unity (we have uj{p) = p (mod 11) for primes p 7^ 11). The characters xi and X2 are 
nnramihed at primes p f 11, so xi = and X 2 = for a uniqne integer 0 < a < 10. Let w £ Q 

be a fixed root of /(x). One can show that 

P = {w, -(rc^ - 79w^ - 3150^2 -b 12193t(; -b 1520110)/11'^) 

is an 11-torsion point of E{Q). The field Q{w) is a Calois extension of Q and that the group 
generated by P is stable under the action of CalQ. We thus have cr{P) = Xi(cr) • P for all a G CalQ, 
and hence xi(CalQ) is a group of order [Q(t(;) : Q] = 5. 

We have a 2 {E) = —1, so the roots of the polynomial det(x/ — /0E,ii(Frob2)) = — (—l)x -b 2 

(mod 11) are 4 = 2^ and 6 = 2® (mod 11). Since xi(Frob2) = 2“ and x(Frob2) = 2^^““ are the 
roots of det(x/ — p£;,ii(Fi'ob2)) and 2 is a primitive root modulo 11, we have a G {2, 9} and hence 
{xi)X2} = Since xi(CalQ) has cardinality 5, we have xi = and X2 = w®. Since 2 is a 

primitive root modulo 11, the group /0_E,ii(CalQ) is generated by (^^ ^^ ) = (q g) and (q }), i.e., it 
eqnals Hip. In particular, ±/0£;qi(GalQ) = Gi. 

Consider the elliptic curve E/Q dehned by -b xy = x^ -b x^ — 3632x -b 82757; it has y-invariant 
— 11 • 131^ and conductor 11^. The division polynomial at 11 of E factors as the prodnct of the 
irreducible polynomial /(x) = x® — 129x^-b4793x^-b9973x^—3694800x4-52660939 and an irreducible 
polynomial y(x) of degree 55. Since 11 divides the degree of y(x), we find that /9_E,ii(CalQ) contains 
an element of order 11. Therefore, there are unique characters Xi)X 2: CalQ —7. F]^j^ such that with 
respect to an appropriate change of basis we have (4.9). The characters xi and X2 are unramified 
at primes p f 11 and X1X2 = w, so xi = and X2 = for a unique integer o G {0,1,..., 9}. 

Let tc G Q be a fixed root of /(x). One can show that 

P = {w, (w^ - 79w^ + 843w'^ + 45468u; - 722625)/!!^) 

is an 11-torsion point of E{Q). The field Q{w) is a Calois extension of Q and that the group 
generated by P is stable under the action of CalQ. We thus have cr{P) = Xi{(^)' P for all a G CalQ, 
and hence xi(CalQ) is a group of order [Q(t(;) ; Q] = 5. We have a 2 {E) = 1, so the roots of the 
polynomial det(x/ —/0£;Qi(Frob2)) = x^ —l.x-b 2 (mod 11) are 5 = 2^ and 7 = 2^ (mod 11). Since 
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Xi(Frob2) = 2“ and x(Frob2) = 2^^““ are the roots of det(xl — /9_B,ii(Frob2)) and 2 is a primitive 
root modulo 11, we have a € {4,7} and hence {xi)X2} = Since xi(GalQ) has cardinality 

5, we have xi = and X2 = Since 2 is a primitive root modulo 11, the group /9E,ii(GalQ) is 
generated by ~ (o ?) (o i)’ equals 772,i- In particular, ±/9£;^ii(GalQ) = G2. 

4.5.5. Polynomials for 77+^ (11). This subsection is dedicated to sketching Remark 1.7 and making 
the polynomials explicit; hx notation as in §1.5. Define the polynomials: 

A{x) = (x® - 9x^ + 17x^ + 20x^ - 7Zx + 43)“, 

B{x) = -(x^ + 3x - 6)3(l08000a;'‘® + 23793840x^® - 413223722x'‘^ - 5377010368x^® + 230799738529x^5 

- 3137869050351x“ + 23205911712335x'‘5 _ 90936268647246x'‘^ + 33563647471596x^^ 

+ 1631415220074871x'‘° - 7744726079195413x5^ - 3218815397602111x58 + 236712051437217644x5^ 

- 1686428698022253344x55 + 7984804002023063554x55 - 30444784135263860996x5^ 

+ 96849826504401032248x55 - 232064394883539673213x52 + 210175535413395353857x55 
+ 1609695806324946484826x5° - 11768533689837648360109x2° + 48291196122826259771817x28 

- 143943931899306373170309x25' + 315827025781563232420857x2° - 421596979720485992629121x25 

- 234929885880162547645306x2^ + 3668241437553022801950917x25 - 14221091463553801024770599x22 
+ 39148264563215734730610917x25 - 87534472061810348609315974x2° 

+ 166474240219619575379485393x5° - 275040771573054834247036345x58 
+ 399144725377223909937142938x55' - 511840960382358144595839458x5° 

+ 581656165535334214665717816x5° - 586206578096981243980668654x54 
+ 523465655841901079370457175x58 - 413200824632802503354807972x52 
+ 287270832775316643952335709x55 - 175049577131269087795781453x5° 

+ 92916572268973769104815620x° - 42636417323385892254033027x8 

+ 16754292456737738144357709x5'- 5570911068111617263502302x°+1542648801995330874184236x° 

- 347819053424928336793068x4 + 61683475328903338239178x8 - 8117056250720937228985x2 
+ 708318740340941449799X- 30857360406231018655), 

C(x) = (4x - 5 )(x2 + 3x - 6)°(9x 2 - 28x + 23)8(x4 - 5x8 74^2 _ 2453, 223)° 

• (4x4 - 9x8 _ 2-2 21x - 32)8(25x4 - 114x8 + 167x2 - 86x + 20)8. 

Proposition 4.6. For j G Q, we have J{P) = j for some point P G ^^(Q) — {O} if and only if 
A{x)j‘^ + B{x)j + C{x) G Q[x] has a rational root. 

Proof. Take (x, y) € £ — {O}. Using the equation y'^ + y = x^ — x‘^ — 7x + 10, a direct computation 
shows that J{x, y)A{x) = a{x)y + h{x) for unique a, 6 G Q[x]. Multiplying y"^ + y = x'^ — x"^ — 7x + 10 
by a^, we deduce that {JA — 6)^ + a{JA — b) — afix^ — — 7x + 10) = 0. Therefore, A^j'^ + (—26 + 

a)AJ + h‘^ — ba — a?{x'^ — x^ — 7x + 10) = 0. Our polynomials B and C satisfy B = —26 + a and 
C = {b'^ — ba — a‘^{x^ — x^ — 7x + 10))/A. We thus have 

(4.10) A{x)J{x, ?/)2 + B{x)J{x, y) + C{x) = 0 

for all (x, y) £ £ — {O}. 

First suppose that j = J(xo,yo) for some (xo,yo) G ^(Q) — {d}. Then 0 = A{xo)J{xo,yo)‘^ + 
R(xo)T(xo, 2/0)+ C'(xo) = A{xo)j‘^ + B{xo)j+ C{xo) and hence A{x)j‘^ + B{x)j+ C{x) has a rational 
root. 

Now fix J G Q and suppose that there is an xq G Q such that A(xo)j^ + B{xo)j + C'(xo) = 0. 
Define A(x) := B{x)^ — 4:A(x)C{x). A computation shows that A(x) = D(x)2(x8 — x^ — 7x+ 41/4) 
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for a polynomial D E Q[x] that has no rational roots. The rational number A(xo) = D{xq)‘^{xq — 
Xq — 7xo + 41/4) is a square since j is a root of A{xq)X‘^ + B{xq)X + C{xo) E Q[A]. Therefore, 
= Xq — Xq — 7x0 + 41/4 for some u E Q. With ?/o = — 1/2, we have yQ + yo = x'q —x'q — 7xq + 10 

and hence P := (xo,yo) is a point in T(Q) — {O}. We could have chose v with a different sign, so 
P' := (xo, —V — 1/2) = (xo, —2/0 — 1) also belongs to T(Q) — {O}. 

We claim that J{P) / J{P')- Suppose that they are in fact equal. Using that J{x,y)A{x) = 
a{x)y + 6(x), we find that a(xo)2/o = o(2;o)(~2/o ~ !)• Since a(x) has no rational roots, we must 
have 2/0 = ~l/2 and hence v = 0. However, this is impossible since x^ — x^ — 7x + 41/4 has no 
rational roots, so the claim follows. From (4.10), we find that J(P) and J{P') are distinct roots of 
A{xo)X'^ + B{xo)X + C{xo). Since j is also a root of this quadratic polynomial, we deduce that 

i = J(P) ori = J(P')- □ 

4.6. i = 13. We shall prove parts (i) and (ii) of Theorem 1.8 (part (iv) was explained in the 
introduction); so we will focus on H(13) and its subgroups. We hrst rule out subgroups of (78(13). 

Lemma 4.7. There are no non-CM elliptic curves H/Q for which /J_B,i 3 (GalQ) is conjugate in 
GL 2 (Fi 3 ) to a subgroup o/Cs(13). 

Proof. Kenku has proved that the only rational points of Xo(13^) are cusps, cf. [Ken80,Ken81]. By 
Lemma 3.6, we deduce that the only rational points of the modular curve are cusps. □ 

One can show that the applicable subgroups of B{13) = Gq that are not subgroups of ^8(13) are 
Gi, G 2 , G 3 , G 4 , G 5 , and Gi (7 Gj with i E {1,2} and j E {3,4,5}. Note that these subgroups are 
normal in B{13). 


We now describe several modular function constructed by Lecacheux [Lec89, p.56]. Define 


/(^) = and 2 /(t) = 


pih'x) - pih'x) pih'x) - pih'x) 

where p{z] r) is the Weierstrass p-function at 2 ; of the lattice Zr + Z C C. Define the functions 




(5-l)(£((5-l) + l-/) 


and /i 2 := 


/-I 


(/-!)(/- 5 ) ““ ■ g-P 

The functions h^ and /12 belong to T’ls and satisfy + 2 (^ 2 ) = F^ih^), where 

F 2 {t) = t+{t—l)/t—l/{t—l)—4: = (t^—4t^+t+l)/(t^—t) and F 5 (t) = t—l/t—3 = {t‘^—3t—l)/t-, 


this follows from [Lec89, p.56-57] with H = h^ and h = / 12 . 

Let hQ be the function + 2 (^ 2 ) = Fbih^); it is called a — 3 in [Lec89] and satisfies Je,{h%) = j, 
cf. [Lec89, p.62]. Since J 2 {t) = jQ{F 2 {t)) and J 5 {t) = jQ{F 5 {t)), we have + 2 (^ 2 ) = j and J^ih^) = j. 


Define a := —Ci{ — C13 “ C13 “ C13 + 1- Define the rational functions 

Fi(t) = 13(t^ — t)/(t^ — 4t^ + t + 1 ) and (f)i{t) = {at + 1 — a) / {t — a)\ 

Define the modular function hi := ())i(/i2) E +"13. One can check that Fi{ 4 >i{t)) = F2{t) and hence 
Fi{hi) = +2(^2) = hg. Since Ji{t) = Je,{Fi{t)), we have Ji{hi) = j. 

Define (3 := + C13 + C13 + C13 + C13 + C13 + C13 + C13 + 2. Define the rational functions 

F3(t) = (—5t^ + 7t^ + 8t — 5)/(t^ — 4t^ + t + 1) and 4 > 3 {t) = {^t — 1 ) / {t +/j — 1 ). 

Define the modular function /13 := 4 > 3 {h 2 ) E +"13. One can check that F3{(p3{t)) = F2{t) and hence 
-^3(^3) = +2(^2) = hg. Since J3{t) = JeiFsit)), we have +3(^3) = j. 
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Define 7 = (1 + \/T3)/2; it belongs to Q(Ci 3 ) and moreover equals 7 = —C 13 — C 13 “ C 13 “ C 13 “ 
— ^^ 3 . Define the rational functions 

F 4 (t) = — 3t — 1) and (^ 4 (t) = ((2 — 7 )^ + l)/(t — 2 + 7 )). 

Define the modular function /14 := G Ju 3 . One can check that = F^{t) and hence 

Fi{h/^) = F^{h^) = h%. Since J 4 (t) = J%{Fi{t)), we have J 4 (/i 4 ) = j. 

For 1 < z < 6 , let Hi be the subgroup of GL 2 (F 7 ) that fixes hi. We have shown that Ji{hi) = j. 
By Lemma 3.4, we find that Hi is an applicable subgroup and that the morphism tt/z. : Xh^ —>■ Pq 
is described by the rational function Ji{t). 

Lemma 4.8. The groups Hi and Gi are conjugate in GL 2 (Fi 3 ) for alll <i <Q. 

Proof. The index of Hq in GL 2 (Fi 3 ) is equal to 14, i.e., the degree of Jg as a morphism. Therefore, 
Lfg must be conjugate to i?(13). The index [Hq : Hi] equals the degree of Fi(t), and is thus 3 if 
i G {1,2,3} and 2 if z G {4,5}. 

The groups Hi, H 2 and H 3 are not conjugate in GL 2 (Fi 3 ) since one can show that the images 
of P^(Q) = Q U { 00 } under Ji, J 2 and J 3 are distinct. Therefore, Hi, H 2 and H^ are conjugate to 
Gi, G 2 and G 3 which are the applicable subgroups of B(13) of index 2; however, we still need to 
determine which group is conjugate to which. 

Let E/Q be the elliptic curve defined by — 338x + 2392. The group / 9 £;,i 3 (GalQ) is 

conjugate to a subgroup of H^ since Je = ^ 3 ( 0 ). One can check that E/Q has good reduction 
at 3 and that as{E) = 0. Since — as{E) + 3 = (x — 6 )(x + 6 ) (mod 13), we deduce that the 
eigenvalues of the matrix / 0 £;,i 3 (Prob 3 ) are 6 and — 6 . For every matrix in Gi or G 2 has an eigenvalue 
in (F^^g)^ = {±1,±5}. Since 6 and —6 do not belong to (F^^g)^, we deduce that H^ is not conjugate 
to Gi and G 2 . Therefore, H 3 , is conjugate to G 3 . 

Let E/Q he the elliptic curve defined by = x^ — 2227x — 59534. We have Je = -^ 2 ( 2 ) and 
Je ^ Ti(Q U { 00 }). Therefore, /OE,i 3 (GalQ) is conjugate to a subgroup of H 2 and not conjugate to 
a subgroup of Hi. By computing the division polynomial of E at the prime 13, we find that E has 
a point P of order 13 whose x-coordinate is 17 + 8 i/vf. So with respect to a basis of £'[13] whose 
first element is P, we find that /OE,i 3 (GalQ) is a subgroup of G 2 . Therefore, H 2 is conjugate to G 2 , 
and hence Hi is conjugate to Gi. 

The groups £4 and £5 are not conjugate in GL 2 (Fi 3 ) since one can show that the images of 
F^(Q) = QU { 00 } under J 4 and J 5 are distinct. Therefore, £4 and £5 are conjugate to G 4 and G 5 
which are the applicable subgroups of £(13) of index 3; however, we still need to determine which 
group is conjugate to which. 

Let E/Q be the elliptic curve defined by = x^ — 3024x — 69552. We have je = ^ 5 ( 2 ) and 
jE 4- JiiQ U { 00 }). Therefore, /OE,i 3 (GalQ) is conjugate to a subgroup of £5 and not conjugate to 
a subgroup of £ 4 . By computing the division polynomial of E at the prime 13, we find that E has 
a point P of order 13 whose x-coordinate zu is a root of x^ — 3024x + 12096. The cubic extension 
Q(z/;) of Q is Galois, so with respect to a basis of £[13] whose first element is P, we find that 
/OE,i 3 (GalQ) is a subgroup of G 5 . Therefore, £5 is conjugate to G 5 , and hence £4 is conjugate to 
G 4 ’. □ 

We have thus completed the proof of Theorem 1.8(ii); we can ignore t = 00 since Ji{oo) = 00 for 
z / 3 and J 3 (oo) = J 3 ( 0 ). If £ is a proper subgroup of Gi satisfying ±£ = Gi, then one can show 
that i G {4,5} and £ is one of the groups Hi^j. 


To complete the proof of Theorem 1.8(i), we need only show that the modular curves XoinGj, 
with fixed z G {1, 2} and j G {3,4, 5}, have no rational points other than cusps. It suffices to prove 
the same thing for the modular curves XHiOHj ■ 
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The function field of XHiOHj is Q{hi, hj) and the generators hi and hj satisfy the relation Fi{hi) = 
hg = Fj{hj). The smooth projective (and geometrically irreducible) curve over Q arising from the 
equation Fi{x) = Fj{y) is thus a model of XHiCiHj- 

The following Magma code shows that if {x,y) G is a solution of Fi{x) = Fj{y) (where we say 
that both sides equal oo if the denominators vanish), then y = 0. The code considers the projective 
(and possibly singular) curve Cij in Pq defined by the affine equation Fi{x) = Fj{y) (we first clear 
denominators and homogenize). We then find a genus 2 curve C that is birational with Qj- and is 
defined by some Weierstrass equation = f{x) with f{x) G Q[x] a separable polynomial of degree 
5 or 6 . We then check that the Jacobian J of C has rank 0, equivalently, that J(Q) is a finite group 
(Magma accomplishes this by computing the 2-Selmer group of J). Using that J(Q) has rank 0, the 
function ChabautyO finds all the rational points on C. Using the birational isomorphism between 
C and Cjj, we can determine the rational points of C. 

K<t> : =FuiictionField(Rationals 0 ) ; 

F:=[13*(t~2-t)/(t'3-4*t~2+t+l), (t~3-4*t~2+t+l)/(t'2-t), 

(-5*t~3+7*t~2+8*t-5)/(t"3-4*t~2+t+l), 13*t/(t~2-3*t-l), (t"2-3*t-l)/t ]; 
P2<x,y,z>:=ProjectiveSpace(Rationals(),2); 
for i in [1,2,3], j in [4,5] do 

f:=Numerator(Evaluate(F[i],x/z)- Evaluate(F[j],y/z)); 
while EvaluateCf,z,0) eq 0 do f:= f div z; end while; 

C0:=Curve(P2,f); 

b,Cl,f1:=lsHyperelliptic(CO); C2,f2:=SimplifiedModel(Cl); 

Jac:=Jacobian(C2); RankBound(Jac) eq 0; 

S:=ChabautyO(Jac); 

b,gl:=lslnvertible(f1); b,g2:=lslnvertible(f2); 

T:=gl(g2(S) join SingularPoints(Cl)) join SingularPoints(CO); 

{P: P in T I P [2] ne 0 cuid P [3] ne 0} eq {}; 
end for; 

We find that if Fi{x) = Fi{y) for some x,y G Q U {oo}, then y = 0 or y = oo. Thus the only 
rational points of XHiCiHj are cusps since Jj{0) = Jj{oo) = oo for j G {4,5}. 


4.7. i = 17. We now prove Theorem l.lO(i). Let E/Q be the elliptic curve defined by the 
Weierstrass equation y^ + xy + y = — 190891x — 36002922; it has j-invariant —17 • 373^/2^^ 

and conductor 2 • 5^ • 17^. The division polynomial of E at 17 factors as a product of /(x) = 
x'^ + 482x^ + 1144x^ — 15809842x — 958623689 with irreducible polynomials of degree 4 and 8 • 17. 
Fix a point P G U(Q) whose x-coordinate w is a root of /(x); it is a 17-torsion point. Let C be the 
cyclic group of order 17 generated by P] it is stable under the GuIq action. Let xi '■ GalQ —)■ 
be the homomorphism such that (t(P) = Xi(cr) • P for a G GuIq. One can show that the degree 
4 extension Q{w)/Q is Galois, so xi(GalQ) has cardinality 4 or 8. There is a second character 
X 2 ■ Gal(Q ^ such that, with respect to an appropriate change of basis, we have 

PeM<^) = {''Vx.U) ■ 


The cardinality of PE,i 7 (GalQ) is divisible by 17 since the division polynomial of E at 17 has an 
irreducible factor whose degree is divisible by 17. We have X 1 X 2 = w where u: Gal^ —>■ is 

the character describing the Galois action on the 17-th roots of unity (we have a;(Probp) = p for 
primes p 7 ^ 17). The characters xi s-iid X 2 are unramified at primes p { 2 • 5 • 17, so xi = a;“x and 
X 2 = for some integer 0 < a < 16 and some character y: Gal^ —)• F}'^ unramified at 

pt2 • 5. 

Let Ffi and H 2 be the subgroup of GL 2 (Ff) consisting of matrices of the form 


(u^(ar 0 \ 
1 ^ 0 ) 


and 


/ xi(o-) 0 \ 

V 0 xi(o-)"^ / ’ 
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respectively, with a G GalQ. Since cj and x ^-re ramified at different primes, we find that the image 
of pE,i is generated by (J }) and the groups Hi and H 2 . 

The character x is unramihed at p f 2 • 5 and has image in a cyclic group of order 16. Therefore, x 
must factor through the group Gal(Q(C 64 ) Cs)/^)- Since 641 = 1 (mod 64-5), we have x(Fi’ob 64 i) = 
1. Therefore, Xi(Frob 64 i) = a;(Frob 64 i)“ • 1 = 641“ (mod 17) is a root of 

— 0641 (Fl)x + 641 = — (—9)x + 641 = [x — 641®)(x — 641^^) (mod 17), 

and hence a G {6,11} since 641 is a primitive root modulo 17. If a = 11, then xi(GalQ) = 
which is impossible since the cardinality of xi(GalQ) is 4 or 8. Therefore, o = 6. The group 

H, thus consists of matrices of the form ( f ) with c € Ff,. and in particular is generated by 



To complete the proof that / 5 E,i 7 (GalQ) is Gi, it suffices to show that H 2 is generated by ( 0 - 4 ); 
equivalently, to show that the image of x is cyclic of order 4. As noted earlier, x factors through the 
group Gal(Q(C64, C 5 )/Q) — (2/64 • 5Z)^. One can then show that Gal(Q(C64t Cs)/^) is generated 
by Frobios, Frobiar and Frobaor- The primes p G {103,137,307} were chosen to be congruent to 
1 modulo 17, and hence x(Frobp) = xi(Frobp) is a root of — ap{E)x + p modulo 17. It is then 
straightforward to check that x(Frobio 3 ), x(Frobi 37 ) and x(Frob 307 ) all have order 4. 

The elliptic curve E'/Q defined by the Weierstrass equation y'^ + xy + y = x^ — 3041x + 64278; it 
has j-invariant —17^ • 101^/2. One can show that E/C is isomorphic to E'. The group pE' i 7 (GalQ) 
is thus conjugate to G 2 in GL 2 (Fi 7 ). 

Finally we note that Gi and G 2 have no index 2 subgroups that do not contain —I. 

4.8. i = 37. We now prove Theorem l.lO(ii). Let E/Q be the elliptic curve defined by the equation 
y"^ + xy + y = — 8 x + 6; it has j-invariant —7 • 11^ and conductor 5^ • 7^. The division 

polynomial of E at 17 factors as a product of /(x) := x® — 15x® — 90x‘^ — 50x^ + 225x^ + 125x — 125 
with irreducible polynomials of degree 6 , 6 and 18 • 37. Fix a point P G E{Q) whose x-coordinate 
w is a root of /(x); it is a 37-torsion point. Let C be the cyclic group of order 37 generated by P; 
it is stable under the Galjj action. 

Let xi: GuIq —)• Fgy be the homomorphism such that (t(P) = Xi{^) • P for u G Galjj. One 
can show that the degree 6 extension Q(rc)/Q is Galois, so xi(GalQ) has cardinality 6 or 12 ; in 
particular xi(GalQ) is a subgroup of (Fg^)^. There is a second character X 2 - GuIq —^ F 37 such 
that, with respect to an appropriate change of basis, we have 

PeM^) = {""V x2G)) • 

The cardinality of /OE, 37 (GalQ) is divisible by 37 since the division polynomial of E at 37 has an 
irreducible factor whose degree is divisible by 37. So to prove that / 9 _E, 37 (GalQ) = G 3 , it suffices to 
show that the homomorphism Xi ^ X 2 : Galjj —(Fgy)^ x Fgy is surjective. 

The characters xi and X 2 are unramihed at primes p { 5 • 7 • 37. By Proposition 11 of [Ser72], we 
have {xi) X 2 } = {«, a~^ ■ ca} where a: GuIq —)• F|{ is a character unramihed at primes p \ 5-7 and 
ui: GuIq —>• Fgy is the character describing the Galois action on the 37-th roots of unity. Since a is 
unramihed at 37, we hnd that the character a~^ ■ to is surjective and that (a x {a~^ ■ a;))(GalQ) = 
a(GalQ) X Fgy. Since xi is not surjective, we must have xi = and X 2 = • uj. It thus suffices 

to show that the image of a contains an element of order 12. The hxed held of the kernel of a 
is contained in Q(C 5 !C 7 ) since it is unramihed at p { 5 • 7 and has image relatively prime to 5 • 7. 
Since 107 = 2 (mod 35), we have a(Frob 2 ) = a(Frobio 7 ). Therefore, a(Frob 2 ) is a common root of 
x^ — a 2 {E)x + 2 = x‘^ + x + 2 and x^ — aio 7 (P)x -|- 107 = x"^ + llx -|- 107 modulo 37. This implies 
that a(Frob 2 ) equals 8 G Fgy which has order 12. 
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One can show that the quotient of -E by C is the elliptic curve El'/Q defined hy y'^ + xy + y = 
— 208083x — 36621194; it has j-invariant —7 ■ 137^ • 2083^. The group / 9 _E', 37 (GalQ) is thus 
conjugate in GL 2 (F 37 ) to G 4 . 

Finally we note that G 3 and G 4 have no index 2 subgroups that do not contain —I. 


5. Quadratic twists 

Fix an elliptic curve E/Q with Je ^ {0,1728} and an integer N >3. 

Define the group G := ±pE,NiGaliQ) and let Ti be the set of proper subgroups if of G that satisfy 
EH = G. For each group H € H, we obtain a character 

Xe,h- GalQ —{±1} 

by composing pe,n with the quotient map G —)• G/H = {±1}. The hxed held of the kernel of the 
character xe,h is of the form for a unique squarefree integer (Ie^h- Dehne the set 

Ve := {dE,H'- H G H}. 

Using EpE^NiGalq) = G, we hnd that different groups H gH give rise to distinct characters xe,h 
and thus {VeI = \H.\. 

5.1. Twists with smaller image. For a squarefree integer d, let be a quadratic twist of E/Q 

by d. By choosing an appropriate basis of Ed[i], we may assume that pe^,n'- GuIq ^ GL 2 (Z/A^Z) 
satishes 

PEd,N = Xd ■ Pe,n-, 

where Xd- Gal^ —)• {±1} is the character corresponding to the extension Q{Vd)/Q. We have 
EpEd,wiGalq) = ±/3£:^Ar(GalQ) = G. Therefore, pE^,NiGalq) is equal to either G or to one of the 
subgroups H gH. 

We now show that Ve is precisely the set of squarefree integers d for which the image of Pe^H 
is not conjugate to G. 


Lemma 5.1. Take any squarefree integer d. 

(i) We have d G Ve if and only if the group pEd,N{GalQ) is conjugate in GL 2 (Z/A^Z) to a 
proper subgroup of G. 

(ii) If d = dE,H for some H gTL, then pEd,N{Ga\Q) is conjugate in GL 2 (Z/A^Z) to H. 


Proof. Take any group H gH. Composing pEa,N '■ GuIq — ^ G with the quotient map G G/H = 
{±1} gives the character Xd • Xe,h- Therefore, pE^, NiGalq) is a subgroup of H (and hence equal 
to H) if and only if xe,h = XE equivalently, d = dE^n- Parts (i) and (ii) are now immediate. □ 

Since \Ve\ = \H\, we deduce from Lemma 5.1 that the map 

H —)> Ve, H i-a dE,H 

is a bijection. 


Remark 5.2. Observe that pEd^NiGalq) being conjugate to H in GL 2 (Z/A^Z) need not imply that 
d = dE,H- For example, it is possibly for distinct groups in H to be conjugate in GL 2 (Z/A^Z). 

5.2. Computing Ve- Now assume that N > 3 is odd; we shall explain how to compute Ve (we 
will later be interested in the case where N is an odd prime). Let Me be set of squarefree integers 
that are divisible only by primes p such that p\N or such that E has bad reduction at p. 

For each r > 1 , let Vr be the set of d G Mg such that 

(5.1) ap{E) ^ -2 (mod N) 

holds for all primes p < r for which E has good reduction and p = 1 (mod N). 
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Lemma 5.3. Suppose that N is odd. We have Ve C with equality holding for all sufficiently 
large r. 

Proof. Define & := Hr'Dr', it is the set of d £ Me such that (5.1) holds for all primes p = 1 (mod N) 
for which E has good reduction. We have Q Pr' if r > r', so it suffices to prove that ^ = T>e- 
Take any d ^ S>. We have ap{Ed) = {^ap{E) ^ —2 (mod N) for all primes p = 1 (mod N) 
for which E has good reduction. By the Chebotarev density theorem, there are no elements 
9 € PEd,NiGalq) satisfying det( 5 ) = 1 and tr:{g) = —2. In particular, the group /9Ed,iv(Gal(Q) does 
not contain —I and hence d G Pg by Lemma 5.1(i). Therefore, & C Pg. 

We have Ve E Me since each character xe,h factors through pe,n (and is hence unramified at 
all primes p \ N for which E has good reduction). 

Now take any d € T>e — ^■ There is thus a prime p = 1 (mod N) for which E has good reduction 
and ap{Ed) = {^)ap{E) = —2 (mod N). Define g := pE^,N(Fiohp)', it has trace —2 and determinant 
1. Since N is odd, some power of g is equal to —I. Therefore, /9£;^^Ar(GalQ) = ±/9£;^^Ar(GalQ) = G 
which contradicts that d G P_e- Therefore, T>e — & is empty and hence T>e ^ S>. □ 

One can compute the finite sets Vr for larger and larger values of r until |Pr| = |'H| and then 
Ve = Pr- This works since we always have an inclusion Pb T P,, by Lemma 5.3, and equality 
holds when \Vr\ = \'H\ since \Ve\ = \'H\. 

When is a prime, the integers in Ve come in pairs. 

Lemma 5.4. Suppose N = i is an odd prime. Let V'^ he the set of d G Ve for which d. Then 

^E= (j {d,i-if-^yH-d}. 

Proof. Define i* := (—Take any d G Ve. We need to show that d£* or d/£* belong to 
Ve (whichever one is a squarefree integer). After possibly replacing E by Ed, we may assume that 
4 = 1 and hence we need only verify that i* G Pg. 

So assume that /3£;_£(GalQ) is a proper subgroup of G and hence is equal to one of the H G PL. 
We need to show that /?£;'^£(GalQ) is also a proper subgroup of G, where E' := Ei*. 

The field Q(\/P) C Q(C^) is a subfield of both Q(£'[^]) and Q(£''[^]). Since E and E' are 
isomorphic over Q(\/P), we deduce that [Q(P'[£]) : Q] = [Q(P[£]) : Q]. Therefore, 

\PE'AGs^h)\ = : Q] = : Q] = \PEAG^h)\ = \H\ = |G|/2. 

By cardinality assumption, we deduce that pE' AGalq) is conjugate to a proper subgroup of G. □ 

Remark 5.5. One could also use the methods of this section to help determine PL. For example, 
if Pr = 0 for some r, then PL = 9. Suppose we are in the setting, like what happens often in the 
introduction, where we know that \PL\ > 2 because we have two explicit elements of PL. Then to 
verify that \PL\ = 2, one need only find an r such that |Pr| = 2. 

5.3. Some examples. 

5 . 3 . 1 . Take 1 = 1. Let P/Q be the elliptic curve dehned by y‘^ = — 5^7^x — 5 '^ 7 ^ 106 ; it has 

j-invariant 3 ^ • 5 • AI'lf and conductor 2 • 5 ^ • A. From the part of Theorem 1.5 proved in § 4 . 4 , we 
know that ±/9£;^7(GalQ) is conjugate to the group Gi of § 1 . 4 . Let PL be the set of proper subgroups 
H of Gi such that EH = Gi. The set PL consists of two groups; they are both conjugate in GL 2 (F 7 ) 
to the group Piq of § 1 . 4 . The curve E is denoted by £i in § 1 . 4 . 

We have Ve E Me = {±1, ±2, ±5, ±7, ±10, ±14, ±35, ±70}. The primes 211, 239 and 337 are 
congruent to 1 modulo 1. One can check that 

a 2 ii(P) = 16 = 2 (mod 7), a 23 g{E) = -5 = 2 (mod 7), a 337 (P) =-5 = 2 (mod 7). 
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So if d G 2^337, then (^) = 1, (^) = 1 and (^) = 1- Checking the d G Me, we find that 
1^337 C {1, —7}. Since \T-L\ = 2, we deduce that Ve = {1, —7}. 

Now let E'/Q be any elliptic curve with j-invariant 3^ • 5 • 7^/2^. Using Lemma 5.1, we deduce 
that /9E',7(GalQ) is conjugate to Gi if and only if E' is not isomorphic to E or its quadratic twist 
by —7. When / 0 _E', 7 (GalQ) is not conjugate to Gi it must be conjugate to in GL 2 (F 7 ). 

5.3.2. Take i = 11. Let Gi, and Hi 2 be the groups from §1.5. The set H of proper subgroups 
H of Gi for which ±H = Gi is equal to {Hi^i, Hi^ 2 }- 

Let E/Q be the elliptic curve defined by y^+xy+y = 305x+7888; it has j-invariant —11^ 

and is isomorphic to the curve £i of §1.5. In §4.5.4, we showed that /9Epi(GalQ) and ±/9£:^ii(GalQ) 
are conjugate in GL 2 (Fii) to Hi^i and Gi, respectively. 

Using Lemma 5.4 and \T>e\ = \'H\, we deduce that Ve = {1,-11}. Lemma 5.1 implies that if 
U'/Q has j-invariant —11^, then /9£;/^ii(GalQ) is not conjugate to Gi if and only if E' is isomorphic 
to E or its quadratic twist by —11. If U' is isomorphic to E or its twist by —11, then pE' ,ii(GalQ) 
is conjugate in GL 2 (Fii) to Hip or Hip, respectively. 

5.3.3. Take i = 11. Let G 2 , 772,1 and 772,2 be the subgroups of GL 2 (Fii) from §1.5. The set 77 of 
proper subgroups 77 of G 2 for which ±77 = G 2 is equal to {772,1,772,2}. 

Let U/Q be the elliptic curve defined by y'^ + xy = + x'^ — 3632x ± 82757; it has j-invariant 

— 11 • 131^ and is isomorphic to the curve £2 of §1.5. In §4.5.4, we showed that /9£;,ii(GalQ) and 
ip£;,ii(GalQ) are conjugate in GL 2 (Fii) to 772 ,1 and G 2 , respectively. 

Using Lemma 5.4 and {VeI = |77|, we deduce that Ve = {1,-11}. Lemma 5.1 implies that 
if E'/Q has j-invariant —11 • 131^, then pE/,ii(GalQ) is not conjugate to G 2 if and only if E' is 
isomorphic to E or its quadratic twist by —11. If U' is isomorphic to E or its twist by —11, then 
PE',ii(GalQ) is conjugate in GL 2 (Fii) to 772 ,1 or 772,2, respectively. 

6. Quadratic twists of families 
In this section, we complete the proof of the theorems from §1. 

6.1. General setting. Fix an integer N > 3 and an applicable subgroup G of GL 2 (Z/A^Z). Let 
77 be the set of proper subgroups 77 of G that satisfy ±77 = G. 

Assume that the morphism ttc- Xq —>■ Fq arises from a rational function J{t) G Q(7), i.e., the 
function field of Xq is of the form Q{h) where j = J{h). 

Let g{t) be a rational function Q(7) such that 

a{t) := -3g{tfj{t)/{J{t) - 1728) and 6(7) := -2g{tf J{t)/{J{t) - 1728) 

belong to Z[7], and for which there is no irreducible element vr of the ring Z[7] such that vr^ divides 
a and divides 6. After possibly changing g' by a sign, we may assume that g is the quotient 
of two polynomials with positive leading coefficient; the function g{t) is now uniquely determined. 
Define A := —16(4a^ ± 276^); it is a polynomial in Z[7] and equals 2^^3® J(7)^/( J(7) — 1728)^5(7)®. 
Let ^ be the set of squarefree /(7) G Z[7] which divide NA{t). 

Take any u G Q for which J{u) ^ {0,1728, 00 }. We have A(m) / 0 and hence /(u) / 0 for all 
/ G Let Eu/Q be the elliptic curve defined by the Weierstrass equation = x^ + a{u)x + b{u); 
note that A{u) / 0 since J{u) ^ {0,1728, 00 }. One can readily check that the curve Eu has j- 
invariant J{u). Warning: this is not to be confused with the quadratic twist notation we used in 
§5. 
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Proposition 6.1. There is an injective map 

fn 

such that for any u G Q with J{u) ^{0,1728, 00 } and ±pE^,N{Ga].Q) conjugate to G inGh 2 {T,/N'L), 
the following hold: 

(a) If E'/Q is an elliptic curve with j-invariant J{u), then Pe',N iGalq) is conjugate to G in 
GL 2 (Z/A^Z) if and only if E' is not isomorphie to the quadratic twist of Eu by fniu) for 
allH gTL. 

(b) If E'/Q is isomorphic to the quadratie twist of E^ by f{u) for some H gTL, then / 0 £;',Ar(GalQ) 
is eonjugate to H in GL 2 (Z/A^Z). 

The sets {fniu) : H £ H} and T>e^ represent the same cosets in with T>e^ defined as 

in §5. 

Proof. Define the scheme U := SpecZ[t, A(t)“^]. By taking the square root of a polynomial 
/ £ .y#, we obtain an etale extension of U of degree 1 or 2; we denote the corresponding quadratic 
character by Xf- ^i(G) —)• {±1}- Gonversely, every (continuous) character —)• {±1} is of the 

form Xf for a unique / £ (Note that 2 always divides A(t)). 

The Weierstrass equation 

y"^ = + a{t)x + b{t) 

defines a relative elliptic curve E ^ U. Let E[N] be the A-torsion subscheme of E. The morphism 
E[N] —)• U allows us to view £'[A] as a lisse sheaf of Z/AZ-modules on U that is free of rank 2. 
The sheaf Li [A] then gives rise to a representation 

PN-. TTl{U) -G GL 2 (Z/AZ) 

that is uniquely defined up to conjugacy (we will suppress the base point in our fundamental group 
since we are only interested in pjy up to conjugacy). 

We now consider specializations of E. Take any u £ U{Q), i.e., an element u £ Q with A(u) 7 ^ 0. 
One can show that elements u £ U{Q_) can also be described as those n £ Q for which J{u) ^ 
{0,1728, 00 }. We can specialize A at u to obtain the elliptic curve that we have denoted Eu/Q] it 
is dehned by y'^ = x^ + a{u)x + h{u) and has j-invariant J{u). 

Let pu,N'- GalQ —)• GL 2 (Z/AZ) be the specialization of pN at u; it is obtained by composing 
the homomorphism u* : GuIq —)• tti{U) coming from u £ t/(Q) with p^- The homomorphism pu^N 
agrees, up to conjugacy, with the representation pEu,n that describes the Galois action on the 
A-torsion points of Eu- So taking pEu,n = Pu,N, specialization gives an inclusion /9^^^Ar(GalQ) C 

pNiMU))- 

We claim that ±/ 97 v('?i'i(C 7 )) and G are conjugate in GL 2 (Z/AZ). By Lemma 3.5, the group 
±/ 9 £;„, 7 v(GalQ) is conjugate to G in GL 2 (Z/AZ) for “most” tt £ Q. By Hilbert’s irreducibility 
theorem, the group ±/ 3 £;^^ 7 v(GalQ) equals EpNiT^iiU)) for “most” tt £ Q. This proves the claim. 

We may thus assume that G = ±/?Ar( 7 ri(f 7 )) and hence we have a representation pN : 7 ri([/) —)• G. 
Specializations thus give inclusions /?£;„^Ar(GalQ) C G. Take any H gTL and let xh '■ —)• {±1} 

be the character obtained by composing pj^ with the quotient map G —)• G/H = {±1}. We thus 
have Xh = Xfu fo^ ^ unique polynomial fn G M. 

Specializing xh at u, we obtain the character xEu,h- Galjj —)• {±1} from §5. With notation as 
in §5, we find that the integer dE^^n lies in the same class in Q^/(Q^)^ as fniu)- Therefore, the 
classes of in Q^/(Q^)^ are represented by the set {fniu) : H G H}. Parts (a) and (b) are 
now immediate consequences of Lemma 5.1. □ 

We claim that the set of polynomials 

.^:={fH:HG %} 
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is uniquely determined and has cardinality \'H\. By Hilbert irreducibility, one can chose u G U{Q) 
such that ±/ 9 E„,Af(GalQ) = G and such that the map ^ —)• is injective. 

The uniqueness of ^ then follows from part (a) of Proposition 6.1. 

6.2. Computing We now focus on the case where is a prime i G {3,5, 7,13}. Fix notation 
as in the subsection of §1 for the given i. 


Let G be one of the subgroups Gi of GL 2 (F£) in §1 for which there is a corresponding rational 
function J{t) := Ji{t) G Q{t) — Q. The group G is applicable and in particular contains —I. 

We take notation as in §6.1. In particular, % is the set of proper subgroups H oi G such that 
±77 = G. We shall assume that 77 7 ^ 0 (otherwise ^ = 0); this holds when 

(7, i) G {(3,1), (3,3), (5,1), (5, 5), (5, 6), (7,1), (7,3), (7,4), (7, 5), (7, 7), (13,4), (13, 5)} . 

In each of these cases, one can check that |77| = 2. 


We now explain how to compute the set ^ = {///: 77 G 77}; it has cardinality |77| = 2. Take 
any u G Q with J{u) ^ {0,1728, 00 } such that J{u) ^ Jj(Q) for all j < i. From the parts of the 
main theorems proved in §4, this implies that ±/ 9 s^^^(GalQ) is conjugate to G. Let Ve^ be the 
(computable!) set from §5. From Proposition 6.1, we find that 

(6.1) ^ C {/ G : f{u) G d(Q^)^ for some d G T’e^}- 

By considering (6.1) with many such u G Q, one is eventually left with only |77| candidates / G 
to be of the form fn] this then produces the set {fn ■ 77 G 77} of order |77| (for our examples, one 
only needs to check u G {1,2,3,4}). One could also work with a single u G Q chosen so that the 
map ^ —)■ Q^/(Q^)^, / f{u) ■ (Q^)^ is injective. This method thus produces 


Doing the above computations, we hnd that 

{/7,:77G77} = {/i,r/i} 

for a unique polynomial fi G where £* := (—l)(^“i)/2 . this can also be deduced from |77| = 2 
and Lemma 5.4. We thus have fi = /mi and £*fi = /m 2 ) where 77 = {Mi, M 2 }. 

Let h be the largest element of Z[7], in terms of divisibility, with positive leading coefficient such 
that /i^ divides afi and Ti® divides bff; define A := {afD/h^ and B := {bff)/h^ in Z[t]. The 
Weierstrass equation 

y'^ = + A{t)x + B{t) 

is precisely the equation given for £i^t in the subsection of §1 corresponding to the prime 7. (For 
code verifying these claims, see the link given in § 1 . 10 .) 

For u G Q with J{u) ^ {0,1728, 00 }, let be the elliptic curve over Q defined by setting t 
equal to u. Let 77'/Q be any elliptic curve with je' ^ {0,1728} for which ±p£;/^£(Gal(Q) is conjugate 
to G in GL 2 (F£). From the parts of the main theorems proved in §4, we have je' = J(u) for some 
u G Q. The curve E^/Q also has j-invariant J{u). The twist of by /i(u) is isomorphic to the the 
curve £i^u/Q- By Proposition 6.1, we deduce that /9£;'/(GalQ) is conjugate to G if and only if E' is 
not isomorphic to 8 i^u and not isomorphic to the quadratic twist of £i^u by 7*. By Proposition 6.1, 
PE'/iGalq) is conjugate to Mi or M 2 when E' is isomorphic to or the quadratic twist of 
by 7*, respectively. 

It thus remains to determine Mi and M 2 . 


If (7,7) G {(3,1), (7,1)}, then Mi and M 2 are both conjugate to 77jq since the two groups in 
77 are conjugate in GL 2 (F£). We shall now assume that (7,7) ^ {(3,1), (7,1)}. We then have 
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H = Hi^ 2 }- It thus remains to prove that Mi = Hi^i (and hence M 2 = Hi^ 2 )- 


Suppose that {£, i) G {(5,1), (5, 5), (5, 6 ), (7, 3), (7,4), (13,4), (13, 5)}. Take u, p and a as in Table 
2 below for the pair 


(£,z) 

(5,1) 

(5,5) 

(5,6) 

(7,3) 

(7,4) 

(13,4) 

(13,5) 

u 

1 

2 

1 

2 

2 

1 

1 

p 

2 

3 

2 

3 

3 

2 

2 

a 

-2 

-1 

-2 

-3 

-3 

2 

2 


Table 2. 

The element u G Q is chosen so that Ji{u) ^ {0,1728, 00 } and such that Ji{u) ^ Jj{QU { 00 }) 
for all j < i. Dehne the elliptic curve E := £i^u/Q- By our choice of u, the group / 3 £;^£(GalQ) is 
conjugate in GL 2 (F£) to Mi. 

The curve has good reduction at the prime p and we have a = ap{E). Let tp be the image of 
(a,p) in F|; it equals (tr(^), det(A)) with A := pE/{Ficohp) G Mi. A direct computation shows 
that tp ^ {(tr(A),det(A)) : A G Therefore, Mi is not conjugate to Hi^ 2 - So Mi must be 

conjugate to 1 and hence M 2 is conjugate to 2 - 

Finally, consider the remaining pairs (^, z) G {(3,3), (7,5), (7,7)}. 

Gonsider {i,i) = (3,3). The pair (3(tt + l)^,4tt(u + 1)^) is a point of order 3 of for all u. 
This implies that Mi is conjugate in GL 2 (F 3 ) to a subgroup of (g*). So Mi / Hip and hence 

Ml = Hip. 

We may now suppose that i = 7 and i G {5, 7}. 

Take i = 5. Let E' /Q be the elliptic curve defined by — 2835(—7)^x — 71442(—7)^; it 

is the quadratic twist of £^p by —7. Using Theorem 1.5(ii), which we proved in §4, we find that 
i/ 0 E', 7 (GalQ) is conjugate to G 5 . The group / 0 £;', 7 (Gal(Q) is thus conjugate to M 2 . So to prove that 
M 2 = Hip, and hence Mi = Hip, we need only verify that E' has a 7-torsion point defined over 
some cubic field. Let u; G Q be a root of the irreducible polynomial — 441x^ — 83349x-1-22754277. 
The pair [w, 21w — 1323) is a point of order 7 on U'. 

Finally, take i = 7. Let E'/Q be the elliptic curve defined by y‘^ = — 17870609043(—7)^x — 

919511455160466(—7)^; it is the quadratic twist of £tp by —7. Using Theorem 1.5(ii), which we 
proved in §4, we find that ipe'j(GalQ) is conjugate to G 7 . The group pg'j(GalQ) is thus conjugate 
to M 2 . So to prove that M 2 = Hip, and hence Mi = Hip, we need only verify that E' has a 7- 
torsion point defined over some cubic field. Let tc G Q be a root of the irreducible polynomial 
x^ - 1750329x2 -h 1015924207851X - 195667237639563291. The pair {w, I323w - 714884373) is a 
point of order 7 on U'. 


7. Proof of Propositions from §1.9 

Let E be an elliptic curve defined over Q that has complex multiplication. Let R be the ring of 
endomorphisms of E)q. Let A: C Q be the minimal extension of Q over which all the endomorphisms 
of Uq are defined; it is an imaginary quadratic field. Moreover, we can identify k with R Gg Q 
(the action of R on the Lie algebra of E^ gives a ring homomorphism R ^ k that extends to an 
isomorphism R®z Q —?• /c). The field k has discriminant —D. 

Take any odd prime i. For each integer n > 1, let E[£^] be the ^"'-torsion subgroup of E{Q). 
The Gadic Tate module Ti{E) of E is the inverse limit of the groups E\£^] with multiplication by i 
giving transition maps —)■ E[l]; it is a free Z^-module of rank 2. The natural Galois action 
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on Ti{E) can be expressed in terms of a representation 

Pe,i°° ■ Galfc —)• Autz^{T^{E)). 

The ring R acts on each of the E[i'^] and this induces a faithful action of R on Ti{E). 

The Tate module Ti{E) is actually a free module over Ri := R®i of rank 1 (see the remarks 
at the end of §4 of [ST68]). We can thus make an identification Kniji^{T^{E)) = R^. The ac¬ 
tions of Galfc = Gal(Q/A;) and Ri on Ti{E) commute, so the restriction of pE,i°° to Gal^ gives a 
representation 

Galfc —)■ Autfi^{T£{E)) = R^. 

Lemma 7.1. 

(i) If E has good reduction at i, then pE,e°°{Galk) = Rf- 

(ii) If Je / 0, then pE,i°°{Galk) is an open subgroup of R^ whose index is a power of 2. 

Proof. Since Rf is commutative, we can factor Pe,£°°\G aik through the maximal abelian quotient 
of Galfc. Gomposing with the reciprocity map of class field theory, we obtain a continuous repre¬ 
sentation gE,£°° ■ ^ Rf, where is the group of ideles of k. Define k£ := k = W.^\£kv, 

where the product is over the places v ol k lying over I and k^ is the completion of A; at u. For 
an idele a G A^, let a£ be the component of a in k^. From [ST68, Theorems 10 &: 11], there is a 
unique homomorphism e: A^ —>■ k^ such that Qe,£°°{o) = £ia)af^ for a G A^. The homomorphism 
e satisfies s{x) = x for all x & k^ and its kernel is open in A^. We identify R^ = > where 

Oy is the valuation ring of ky , with a subgroup of A^ (by letting the coordinates at the places v \ i 
of A; be 1). Let B be the kernel of ej^x. 

First suppose that E has good reduction at £, and hence at all places v\i of k. By the first 
corollary of Theorem 11 in [ST68], we deduce that that e is unramified at all v\i. Therefore, 
B = Rf and hence QE,e°°{Rf) = Rf- Therefore, pe,£°°(G aik) contains, and hence is equal to, Rf. 

Now suppose that Je / 0. Since i is odd and Je 0, the subgroup of R[£~^^ consisting of 
roots of unity has order 2 or 4. By Theorem ll(ii) and Theorem 6(b) in [ST68], we find that B is 
an open subgroup of R^ with index a power of 2. So qe,£°°{B) = B and hence pE,£°°{Ga\k) D B. 
Therefore, pe,£°° (Gaik) is an open subgroup of Rf whose index is a power of 2. □ 

The following gives constraints on the elements of /3E^£oo(GalQ — Galfc). Since i? is a quadratic 
order, there is an element ft G R — Z such that G Z; note that /3 is not defined over Q. We can 
view /3 as an endomorphism of T£{E). 

Lemma 7.2. For any a G Gal^ — Galfc, we have pE,£°°{o')(d = —/3pE,£°°{o') and t}:{pE,£°°{cr)) = 0. 

Proof. Take any a G GalQ — Gal^. The group GuIq acts on R and we have cr{(3) = — /3 since fP' gT, 
and ft is not defined over Q (but is defined over k). So for each P G E[i'^], we have a{f3{P)) = 
a{II){a{P)) = —l3{a{P)). Taking an inverse limit, we deduce that PE,£°°{^)f3 = —PpE,£°°if^)- In 
Aut(Q^(T£(Fi) (8)z^ = GL 2 (Q£), we have pe,£°°[ct) = —(5pE,£°°{(y)fi~^. Taking traces we deduce 

that tr{pE. goo (cr)) = -ir{pE^ goo (cr)) and hence tr(/3£:^£oo(cr)) =0. □ 

Lemma 7.3. Suppose that i \ D and that E has good reduction at i. 

(i) If £ splits in k, then /9s^£(GalQ) is conjugate in GL 2 (F£) to Ns{i). 

(ii) If £ is inert in k, then pE,£{GalQ) is conjugate in GL 2 (F£) to Nns{£)- 

Proof. Lemma 7.1 implies that the group C := pE,£{Galk) is isomorphic to {R/£R)^. The ring 
R/£R is isomorphic to x F^ or W £2 when £ splits or is inert in k, respectively. Therefore, C is a 
Cartan subgroup of GL 2 (F£); it is split if and only if £ splits in k. Let N be the normalizer of C 
in GL 2 (F£). The group C = pE/{Ga\.k) is normal in /9E/(GalQ) since A;/Q is a Galois extension, so 

PE,£{Ga\q) C N. 
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It remains to show that / 9 E,£(GalQ) = N. Suppose that pE,liGalq) ^ N, and hence / 9 £;^£(GalQ) = 
C = pe, iiGalk)- This implies that the actions of GuIq and R on E[i\ commute. However, this 
contradicts Lemma 7.2 which implies that the actions of cr G Gal^ — Galfc and /3 on E[i] anti¬ 
commute. Therefore, pE,eiGalq) = N. □ 

We now describe the commutator subgroup of the normalizer of a Cartan subgroup C of 
GL 2 (F£). Let e: iV —)• N/C = {±1} be the quotient map, and define the homomorphism 

p: N ^ {±1} xF^, (e(H),det(H)); 

it is surjective. 

Lemma 7.4. 

(i) The commutator subgroup of N is kery?, i.e., the subgroup of C eonsisting of matrices with 
determinant 1. 

(ii) If H is a subgroup of N satisfying EH = N, then H = N. 

Proof. The kernel of p contains the commutator subgroup of N since the image of p is abelian. It 
suffices to show that every element in \Leip is a commutator. If N is conjugate to Ns{i), this is 
immediate since (%) (J °) (% )"^ (J ° )"^ = (S „-!) • 

We now consider the non-split case. We may take C = C{i), N = N{i) and with the explicit 
e G as given in the notation section of §1. Fix /3 G Fp for which = e. The map C{£) —)• F^ 2 ) 
(^ a -|- 6/3 is a group isomorphism. Fix any B G N{i) — C{i). One can check that the map 

(7.1) C{£)^C{i), BAB-^A-^ 

corresponds to the homomorphism F ^2 F^, a i—)■ a^~^. In particular, the image of the map 

(7.1) is the unique (cyclic) subgroup of C{£) of order £ + 1; these are the matrices in C{£) with 
determinant 1. This completes the proof of (i). 

Finally, let 77 be a subgroup of N satisfying ±77 = N. The group 77 is normal in N and N/H 
is abelian, so 77 contains the commutator subgroup of N. From (i), the commutator subgroup of 
N^ and hence 77, contains —I. Therefore, 77 = ±77 = N. □ 

7.1. Proof of Proposition 1.14(i) and (ii). Let 77/Q be an CM elliptic curve with j/e / 0. The 
curve E is thus a twist of one of the curves Eej/Q from Table 1. Take any odd prime £ \ D. The 
curve Eej has good reduction at £. By Lemma 7.3, the group pEj^ ^^^(GalQ) is the normalizer N 
of a Cartan subgroup C of GL 2 (F£). Also the Cartan subgroup C is split or non-split if £ is split 
or inert, respectively, in k. 

First suppose that Je / 1728. Since Je ^ {0,1728}, the curve 77 is a quadratic twist of Eej- As 
noted in the introduction, this implies that ±pE^£(GalQ) and EpEj^ ^^^(GalQ) = N are conjugate in 
GL 2 (F£). After first conjugating / 0 E,£(GalQ), we may assume that N = ±/?E^£(Gal(Q). By Lemma 7.4, 
we have /OE,£(GalQ) = N. 

Now suppose that je = 1728. Let /r 4 be the group of 4-th roots of unity in R. The elliptic curve 
H/Q can be defined by an equation of the form + dx for some non-zero integer d, i.e., E is 

a quartic twist of 774 ^ 1 . There is thus a character a: Gal^ PaE R^ such that the representations 
PE,e°° and a ■ pEii,i°°'- Gal^ ^ Rf are equal. We have / 5 E 4 (Galfc) = Rf by Lemma 7.1(i), 
so the image of / 9 E,£°°(Galfc) in 7?^/{±l} has index 1 or 2. Therefore, the image of pE^(.{Ga\.]f) in 
C/{±7} has index 1 or 2. We have pE,£(GalQ) ^ C since otherwise the actions of GuIq and R on 
E[£] would commute (which is impossible by Lemma 7.2). Therefore, the image of / 9 E,£(Gal(Q) in 
A^/{±7} is an index 1 or 2 subgroup. 

The group G := ±/ 9 E,£(GalQ) thus has index 1 or 2 in N. Since pE/{Ga\.k) ^ C and / 3 E,£(GalQ) ^ 
C, the quadratic character eo pE/: GuIq —)• {±1} corresponds to the extension k = Q{i) of Q. The 
homomorphism detopE,^: GuIq —>■ F^ is surjective and factors through Gal(Q(C£)/Q). We have 
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Q(z)nQ(0) = Q since I is odd, so (/ 9 (/ 9 £;^£(GalQ)) = {± 1 } xF^ and hence '-piG) = {±l}xF^. Since 
[A^ ; G] < 2, the group G is normal in N with abelian quotient N/G. In particular, G contains the 
commutator subgroup of N. By Lemma 7.4, we deduce that G contains the kernel of p. Since G 
contains the kernel of (p and p{G) = {±1} x F^, we have G = N. By Lemma 7.4, we conclude that 
PE,£(GalQ) = N. 

7.2. Proof of Proposition 1.14(iii). We first consider the elliptic curve E = Eoj over Q from 
Table 1 with D = £, where £ is an odd prime and Je 0. We have k = Q(\GG). 

Lemma 7.5. The group ±/ 0 £^£(GalQ) is conjugate to G. 

Proof. Let P be the image of fy/—D in R/£R. Since £ is odd, the F^-module R/£R has basis {/3,1} 
and f3 = 0. Using this basis, we find that R/£R is isomorphic to the subring T := F^ (j] q )©F£ (o i) 
of Using that / 0 E,£°o(Galfc) © 72^, we deduce that pE/{Ga\.k) is conjugate in GL 2 (F£) to a 

subgroup of We may thus assume that 

PE,,(Galfc) C ={(S^) :aGF,^ 6 eF,}. 

By Lemma 7.1(ii), we deduce that [A^ : pE/{Ga\.k)\ is a power of 2 and hence pE,e{Ga\.k) contains the 
order £ group ((g })). The order of pE/{Galk) is divisible by (7—1)/2 since det(pE,£(Galfc)) = (F^)^, 
so PE,i{Galk) contains {(g „) : « S {¥f)‘^,b G F^}. Therefore, EpE/{Galk) = since —1 is not a 
square in F^ (we have £ = 3 (mod 4)). 

Fix any cr G GaliQ — Galfc. The matrix g = pe/{o') is upper triangular since the Borel subgroup 
B{£) is the normalizer of = ±pE/{Galk) in GL 2 (F£). We have tr(g') = 0 by Lemma 7.2, so 
g = (o -a) some a G F^ and b G F^. The group ±/ 9 £;^£(GalQ) is generated by g and and is 
thus G. □ 

The subgroups 77 of G that satisfy ±77 = G are 77i, 772 and G. 

Lemma 7.6. The groups pE,iiGalq) and Hi are conjugate in GL 2 (F£). 

Proof. By Lemma 7.5, we may assume that ±/ 9 ^^£(GalQ) = G. There are thus unique characters 
ipi,'ijj 2 '- GalQ F^ such that pE/ = ^ ^ division polynomial of 

E/Q] it is a polynomial of degree (7^ — l)/2 whose roots in Q are the x-coordinates of the non-zero 
points in E[£]. Since EpE,i{Ga\.(i^) = G, we find that / = / 1/2 where the polynomials fi, f 2 £ 
are irreducible, and fi has degree {£ — l)/2. We may take fi so that it is monic. Take any root 
a G Q of /i and choose a point P = (a, 6 ) in E[£]. We have cr{P) = 'ipi{a)P for all a G Gal^. 
Therefore, Q(a, b) is the fixed field in Q of 'keiipi. 

Suppose that 7 = 3. The point (3, —2) of £^ 3^2 has order 3. The point (12, —4) of £ 3^3 has order 
3. Therefore, Q(a, b) = Q. 

Suppose that 7 = 7. For the curve £74 we have computed that fi = x^—441x^±59339x—2523451. 
If a G Q is a root of /i, then one can check that (a, —7a + 49) belongs to £. For the curve £ 7^2 we 
have computed that fi = x^ — 49x^ — 1029x ± 31213. If a G Q is a root of /i, then one can check 
that (a, 21a — 2107) belongs to £. In both cases, we have [Q(a, 6 ) : Q] = 3. 

Suppose that 7 > 7. Dieulefait, Gonzalez-Jimenez and Jimmez-Urroz have computed Q(o, b) 
and found it to be equal to the maximal totally real subfield Q(C£)'*' of Q(C£)) cf. Lemma 4 of 
[DGJJUll]. They also give a link to files containing an explicit polynomial fi. In particular, 
[Q(a, 6 ) : Q] = (7 — l)/2. (However, note that the conclusions on the image of pE,e in Proposition 9 
of [DGJJUll] are not correct.) 

In all cases, the image of ipi has order [Q(a, 7) ; Q] = (7 — l)/2, so the group / 9 E^£(GalQ) cannot 
be G or H 2 . Therefore, / 9 s^£(GalQ) = 77i. □ 
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Take any elliptic curve E'/Q with the same j-invariant as E = E^j', it is a quadratic twist. Now 
take Ve as in §5. Since H 2 } = 2 , we deduce from Lemma 5.4 (and i = 3 (mod 4)) 

that Ve = { 1 , — 

Since Ve = {1,—^}, we deduce from Lemma 7.6 that if E'/Q^ is not isomorphic to E or its 
quadratic twist by —i, then PE'/iGalq) is conjugate to EpE/iGalq) = = G. If E' is isomorphic 

to E or its quadratic twist by —then PE/iGalq) is conjugate to Hi or H 2 , respectively. 

7.3. Proof of Proposition 1.15. If E/Q^ is given by = f{x) with fix) G Q[x] a separable cubic, 
then /?£;, 2 (GalQ) is isomorphic to the groups Gal(/), i.e., the Galois group of the splitting field of 
/ over Q. Observe that GL 2 (IF 2 ) — © 3 - It thus suffices to compute Gal(/) since the cardinality of 
a subgroup of ©3 determines it up to conjugacy. 

For the je = 1728 case, we have f{x) = x^ — dx = x(x^ — d). We have Gal(/) = Gal(Q(-\/d)/Q) 
which has order 1 or 2 when d is a square or non-square, respectively. 

For the Je = 0 case, we have f{x) = x^ + d. We have Gal(/) = Gal(Q(i^, C 3 )/Q) = 
Gal(Q(-^, y/—3) which has order 2 or 6 when d is a cube or non-cube, respectively. 

For Je ^ {0,1728}, the group pE, 2 {GalQ) does not change if we replace £' by a quadratic twist 
(since —I = I (mod i)), so one need only consider the specific curve E = Eej- Using the f{x) of 
Table 1, one can check that Gal(/) has order 2 for the ^'-invariants listed in (i) and otherwise has 
order 6 . 

Proposition 1.15 is now a direct consequence of the above computations. 

7.4. Proof of Proposition 1.16. Take any prime f > 5; we will deal with £ = 3 in §7.4.1. We 
first consider an elliptic curve E^/Q, defined by the equation 

= x^ + IQd? 

for a fixed cube-free integer d > 1. We have R = Z[a;] and k = Q(a;), where oj := (—1 -|- yJ—^)/2 is 
a cube root of unity in k. The ring i? is a PID. 

If i is congruent to 1 or 2 modulo 3, define C{t) be the Cartan subgroup Cs{E) or Cns{^), 
respectively. Let N{i) be the normalizer of C{i) in GL 2 (F£). 

Lemma 7.7. After replacing Pe^/ ® conjugate representation, we will have pEj^/iGalq) C N{£) 
and pE,i,eiGalk) C C{£) with 

[A^(f) : pe,i, iiGalq)] = [C{£) : pE^^/iGalk)] G {1,3}. 

Proof. We have Ei = Sap. By Lemma 7.3, we have pEi,i{Ga\<i^) = N{1). The curves Ed and £'1 
are isomorphic over Q(^), so /?Ed,^(Gal|Q^^p is conjugate to a subgroup of N{i) of index 1 or 3. 
Therefore, pE^^,liGalq) is conjugate to a subgroup of N{i) of index 1 or 3. Since Pe, d/iGalo) ^ C{i) 
and pEAiiG^h) U C{i), we deduce that [N{i) : pE,i,eiGalo)] = [C{i) : pE^AGa^h)]- □ 

To determine the index in Lemma 7.7, we first compute some cubic residue symbols. Recall that 
we have already defined a representation PEa,i°° '■ Galfc —)• Rf ■ 

Lemma 7.8. Let X be a prime of R dividing I that satisfies A = 2 (mod 3R). Take any non-zero 
prime ideal p } 6 di of R. We have p = Rtt for some vr = 2 (mod 37?). Then 

where we are using cubic residue characters and the field R/XR has order H. 
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Proof. By Example 10.6 of [Sil94, II §10], we have / 0 £;^,£°o(Frobp) = — • tt, where we are 

using the 6 -th power residue symbol. Therefore, 

-2 


and hence 

'pE^,e--iFrohp] 


X 




TT = — 


TT 


TT 


A 


' 2 \ 


TT 


TT 


d^^X 

TT 


where we have used cubic reciprocity. 


□ 


Lemma 7.9. Suppose that £ = 2 (mod 3). Then the group pE^^e{Galk) has index 3 in C{£) if and 
only if £ = 2 (mod 9) and d = £, or £ = 5 (mod 9) and d = £‘^. Note that C{£) has a unique index 
3 subgroup. 


Proof. Using Lemma 7.7 and .^ > 5, we find that pE^^,eiGal^) is an index 3 subgroup of C{£) if and 
only if pE^, £00 (Galfc) lies in a closed subgroup of of index 3. We have C{£) = Cns{^) since £ = 2 
(mod 3), so Rf has a unique index 3 closed subgroup, i.e., the group of a € Rf with (j)^ = 1. 

By the Chebotarev density theorem and Lemma 7.8 with X = £, we deduce that pEj^/{Galk) is 
an index 3 subgroup of C{£) if and only if is a cube in ii/p for all primes p \ Qd£ of R] 

equivalently, is a cube in R. Since is a rational integer, it is a cube in R if 

and only if it is a cube in Z. 

We have 2(^^ — l)/3 = 2(£-|-1)/3 (mod 3), so we need only determine when the integer 
is a cube. In the following, we use that d > 1 is cube-free and that Z has unique factorization. If 
£ = 2 + 9m, then df^^'^£ is a cube if and only if d = .^. If .£ = 5 -|- 9m, then d‘^~^^'^£ is a cube if and 
only if d = If £ = 8 -|- 9m, then df‘^^'^£ is never a cube. □ 


Lemma 7.10. Suppose that £ = 1 (mod 3). Then the group pE^^/iGalk) has index 3 in C{£) if and 
only if £ = A (mod 9) and d = £‘^, or £ = 7 (mod 9) and d = £. 

The group pE^,i{Ga\.k) is conjugate to C{£) = Cs{£) or the subgroup consisting of matrices of the 
form (0 b) with a/b £ a cube. 

Proof. Using Lemma 7.7 and .^ > 5, we find that /o_E^,£(Galfc) is an index 3 subgroup of C{£) if 
and only if pE^^e°°{Galk) lies in a closed subgroup of Rf of index 3. Let us describe the index 3 
subgroups of Rf. Since £ = 1 (mod 3), we have £ = A 1 A 2 for irreducibles A* £ i? that we may 
choose to be congruent to 2 modulo 3R. We have Rf = R^^ x R^^. The cubic residue symbol 
(—) defines a homomorphism : R^ := (u). Since £ > 5, we find that every non-trivial 

homomorphism R^ —)• is of the form cpe := Ti'T '^2 with e = ( 61 , 62 ) £ { 0 , 1 , 2 }^ — {( 0 , 0 )}. 
Therefore, pE^ ^(Galfc) is an index 3 subgroup of C{£) if and only if p^j^ £oo(Galfc) C 'kenpe for some 
6 / ( 0 , 0 ). 

^ 2 (^- 1 ) 

By Lemma 7.8, we have -^)^ = 3 and hence 


(7.2) 


PeiPEa/’^ (FT^ohp)) = 


- 2 (^- 1 ) 


TT 


ei 


. 2 (^- 1 ) 


A 2 


TT 


62 2(£-l)(ei+69) 

' d 3^ A^^A^n 
^ /a 


for all p { 6 d£. Using the Ghebotarev density theorem, we deduce that PEd,£°° (Gaik) U ker (/ 9 e if and 


2(.£—l)(ei+ 60 ) 

only if /3 := d 3 A^^A'^^ is a cube in R. 

First suppose that 61 7 ^ 62 . Let v\^: R^ —» Z be the valuation for the prime Aj and let V£: Z 

be the valuation for £. We have 


V\i (/3) = 6i -b 


2(£-l)(ei-re2) 

3 


(d) = G + 
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2 (^- 1 )^"^+"^) U^(d). 






















We have ei ^ 62 (mod 3) since ei 7 ^ 62 , so v\^{(5) ^ 0 (mod 3) for some i G {1,2}. Therefore, 
/3 G i? is not a cube. 

Now suppose that ei = 62 . We may assume that ei = 62 = 1 since </?( 2 , 2 ) is the square of 
and hence have the same kernel. So /3 = Since is a rational integer, it is a cube in Z 

if and only if it is a cube in i?. If .£ = 1 + 9m, then j3 = is not a cube. If £ = 4 + 9m, then 

j3 = • di which is a cube if and only if d = (recall that d is positive and cube-free). If 

£ = 7 + 9m, then /3 = (d^”^"*'^)^ • d^£ which is a cube if and only if d = .£. 

Finally, suppose we are in the case where PEdA^^^k) is an index 3 subgroup of Cs{£)- There are 
4 index 3 subgroups of Cs{i)- Two of the groups consist of the matrices A := ( q °) for which a is a 
cube (or 6 is a cube); these groups cannot equal pEd,£{Galk) since it would correspond to the case 
where ei = 0 or 62 = 0 (and hence ei 7 ^ 62 ). Another index 3 subgroup of Cs{i) is the subgroup of 
matrices whose determinant is a cube; this is impossible since det{pEd,e{Galk)) = Therefore, 
the only possibility for the image of PEd,i is the group of A with a/b a cube. □ 

We now complete the proof of the proposition for the curve Ed/Q.- From Lemmas 7.7, 7.9 and 

7.10, we deduce that / 9 Ed(Gal(Q) has index 1 or 3 in with index 3 occurring if and only if one 

of the following hold: 

• £ = 2 (mod 9) and d = £, 

• £ = 5 (mod 9) and d = 

• £ = i (mod 9) and d = £‘^, 

• £ = 7 (mod 9) and d = £. 

Set M := PEdAG^^k)] we may assume that it is the index 3 subgroup of C{£) from Lemma 7.9 or 

7.10. The group M is normal in N{£). We have [N{£) : M] = 6 and det(M) = F^, so N{£)/M is 
non-abelian by Lemma 7.4(i). So N[£)/M is isomorphic to 63 and hence, up to conjugation, N[£) 
has a unique index 3 subgroup G' satisfying G' C M. Therefore, G' is conjugate in GL 2 (F£) to 
both pEdAG^A) the group G from part (hi) or (iv) of Lemma 1.16. This finishes the proof of 
Proposition 1.16 for the curve E^/Q and > 3. 

Finally suppose that E/Q is any elliptic curve with j-invariant 0; it is defined by a Weierstrass 
equation + dm^ for some integer m 0 and cube-free integer d. It suffices to show 

that pE^£(GalQ) is conjugate to pEdAGs^A) ™ GL 2 (F£). The curves E and Ed are quadratic 
twists, so ±/ 9 £;^£(GalQ) is conjugate to EpEdAG^^Q)- The general case of Proposition 1.16 is thus 
a consequence of the following lemma. 

Lemma 7.11. There are no proper subgroups ±/ 3 £;^^£(GalQ) has no proper subgroups H such that 
±H = EpEdAGalq). 

Proof. If EpEd/{GalA is conjugate to N(£), then the lemma follows immediately from Lemma 7.4(ii). 
From the case of Proposition 1.16 we have already proved (i.e., for the curve Ed and prime £ > 3), we 
need only show that the group G from parts (hi) and (iv) of Lemma 1.16 have no proper subgroups 
H satisfying EH = G. Equivalently, we need to show that —I is a commutator of such a subgroup 
G. With G as in Lemma 1.16(iii), this follows from (io)(o-!^i)(io (0 -°i) ^ ~ (” 0 ^ 

we may take G as in Lemma 1.16(iv). 

Fix any B G G — G{£). As noted in the proof of Lemma 7.4, the map if. G{£) C{£), 

A I—)• BABA~^ is a homomorphism whose image is cyclic of order 1. Therefore, ip{G Cl C{£)) is 
the cyclic subgroup of G{£) of order {£ E l)/3. In particular, <^(Gn G{£)) contains —I which is the 
unique element of order 2 in G{£). Therefore, —I is a commutator of G. □ 
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7.4.1. 1 = 3 case. We now consider the prime 1 = 3 with E'/Q defined by the elliptic curve 
y 2 _ ^3 _j_ division polynomial of ili/Q at 3 is 3x{x^ + 4d). The points of order 3 in 

E{Q) are thus (0, ±\/d) and {—with e G {0,1,2}. The points Pi = (0, \/d) and 
P 2 = y/—3y/d) form a basis of P[3]. With respect to this basis, we have 


PE,3 


(i>i * \ 

\o ^, 2 ) ^ 


with characters i/’i, ' 02 : GuIq —)• F 3 . The quadratic character 0i describes the Galois action 
on Pi and it thus corresponds to the extension Q{y/d) of Q. The quadratic character 0 i 02 = 
detop£; 3 : GalQ —Fg corresponds to the extension Q(C 3 ) = Q(\/“3) of Q- Therefore, 


(01 X 02)(GalQ) 


'{l}xFj 
< Fg" X {1} 
X Fj 


if d is a square, 
if —3d is a square, 
otherwise. 


To compute the image of pE^ 3 (GalQ) it remains to determine when its cardinality is divisible by 3 
or not. From Pi and P 2 , it is clear that P£;, 3 (GalQ) is divisible by 3 if and only if 4d is not a cube. 


8 . Proof of Proposition 1.13 

By Theorem 1.11, we may assume that p^p(GalQ) is a subgroup of Nns{E}. Let Ig be an inertia 
subgroup of GalQ for the prime 1. We will show that pe,£ has large image by showing that the group 
PE,£{h) is large. The cardinality of pE,i{h) is not divisible by I since it is a subgroup of Nns{E). 
The group pE,i{h) is thus cyclic since the tame inertia group at i is pro-cyclic, cf. [Ser72, §1.3]. 


Let vi be the Padic valuation on normalized so that vi{i) = 1. Let be the maximal 
unramified extension of Qi in a hxed algebraic closed field An embedding Q allows ns 

to identify Ii with the subgroup Gal(Q£/Q™) of GuIq^ := Ga^Q^/Q^). Let be the minimal 
discriminant of E/Q. 


• First suppose that Vi{jE) > 0 and that v^{/S.e) is not congruent to 2 and 10 modulo 12. 

Let L be the smallest extension of Q™ for which E base extended to L has good reduction. 
Define e = [L : Q™]. There is thus a finite extension K/Qi such that E base extended to K has 
good reduction and that v^{K^) = e“^Z, where is the valuation on K that extends V(^. From 
[Ser72, §5.6], we find that e G {1,2,3,4}; this uses our assumption on 

Let Z be the inertia subgroup of Gali^- := Gal(Q£/P); it is a subgroup of p. The action of Z 
on E\i] is semi-simple since the cardinality of pE/{Z) is relatively prime to I (the group 
has this property). Let : P —» F^ and d^'-Z ¥^2 be fundamental characters of level 1 and 2, 

respectively, cf. [Ser72, §1.7]. 

Lemma 8.1. The representation pE/h- Z —>• GL 2 (F£) is irreducible. 

Proof. Suppose that pe/\x is reducible. The representation pe/\i is given by a pair of characters 
and with 0 < ei < 62 < — 1. From Proposition 11 of [Ser72], we can take ei = 0 and 

62 = 6 . The image of pE/{Z) in PGL 2 (F£) is thus isomorphic to 9\{Z) and hence is cyclic of order 
(£- 1 )/gcd(£ - l,e). 

The matrix is scalar for all A G — CnsP- Therefore, the order of every element 

in the image of Nns{(.) —)• PGL 2 (F£) divides i + 1. Since gcd(£ -|- 1,£ — 1) = 2, we deduce that 
— 1)/ gcd(£ — 1, e) equals 1 or 2. This is a contradiction since £ > 17. □ 

Scalar multiplication and a choice of F^-basis for ¥(2 allows ns to identify F^ with a subgroup of 

AutF^(F£ 2 ) = GL 2 (F£). Since PeAi- irreducible by Lemma 8.1, it is isomorphic to 9^^^^'^^ \ Z —)■ 
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F ^2 ^ GL 2 (F£) for some 0 < ei,e 2 < ^ — 1. As an F£[X]-module, E[l] is isomorphic to the dual of 
the etale cohomology group By Theoreme 1.2 of [Car08], we may take 0 < ei,e 2 < e 

(when E has good reduction at i, and hence e = 1, this follows from [Ser72, Prop. 12]). We have 
ei / 62 since otherwise 02 ^''"'^^ = is not irreducible. 

Let g be the greatest common divisor of ei + 62 ^ and i + 1. We have (ei + 62 ^) — e 2 (^ + 1) = 
61 — 62 G {±1, ±2, ±3, ±4} since 0 < 6 < 4, so 5 G {1,2,3,4}. Therefore, pE/{1) contains a cyclic 
group of order {£ + l)/g. 

Lemma 8.2. The group PE,eih) is a subgroup of Cns{^) with index 1 or 3. 

Proof. Set H := pE,e{Ii)', it is cyclic. We claim that H is a subgroup of Cns{^)- Suppose not, 
then the order of H divides 2(£ — 1) since is a scalar matrix for any A G Nns{^) — Cnsi^)- 
Therefore, (f + l)/^ divides 2(£ — l) since pE,e{T) C H contains an element of order (£ + l)/g. Since 
gcd(^ + 1, ^ — 1) = 2, we deduce that {£ + l)/g divides 4. This is impossible since > 17 and 5 < 4. 

It remains to bound the index of H in Cns{^)- We have det(77) = F^ since det opE/ describes the 
Galois action on the Ath roots of unity. Therefore, the group H is cyclic and its order is divisible 
by — 1 and {£ + l)/g. Since gcd(£ + 1,£ — 1) = 2, we deduce that the order of H is divisible by 
{£ — 1){£ + l)/{2g). Therefore, the index b := [Cnsi^) ■ H] divides 2g. 

Suppose b is even. Since Cns{^) is cyclic, the group H must be contained in {A G Cns{^) '■ 
det(A) G (F^)^}; this is the unique index 2 subgroup of Cns{(-)- However, this is impossible since 
det{H) = F^. So 6 is odd and divides 2g G (2,4, 6 , 8 }. Therefore, 6 is 1 or 3. □ 

Now define H := / 9 £;^£(GalQ) n Cns{£). We have / 3 ^;^£(GalQ) ^ Cns{(-) since Cns{^) is not appli¬ 
cable; it does not contain an element with trace 0 and determinant —1. So if 77 = Cns(7), then 
PE,f(GalQ) = Nns{£)- 

We are thus left to consider the case where H is the (unique) index 3 subgroup of Cnsi^)- The 
group H is a normal subgroup of Nns{£) of index 6 . 

Lemma 8.3. We have £ = 2 (mod 3) and the quotient group Nns{£)/H is isomorphic to S 3 . 

Proof. If 7 = 1 (mod 3), then det(i7) = (F}^)^ C F^. This is impossible since det(/ 3 E^£(Gal(Q)) = 
and [/OE,r(Gal(Q) : H] = 2. Therefore, £ = 2 (mod 3). One can now verify that Nns{£) quotiented 
out by the scalar matrices is isomorphic to a dihedral group. It is then easy to check that Nns{£)/H 
is the dihedral group of order 2 • 3; it is thus isomorphic to S 3 . □ 

The index 3 subgroups of S 3 are all conjugate so, up to conjugacy, G (as in the statement of 
Proposition 1.13) is the unique index 3 subgroup of Nns{£) that contains H. Therefore, pe, liGalq) 
and G are conjugate subgroups. 

• Suppose that ve{jE) > 0. 

By twisting E/Q by 1 or 7, we obtain an elliptic curve E'/Q with vi^Ae') not congruent to 2 
and 10 modulo 12. The group ±pE,£(GalQ) is conjugate to ±pE',liGalq). The previous case applies 
and shows that ±pE,liGalq) is conjugate to EG = G ov ±Nns{£) = Nns{£) in GL 2 (F£). 

It remains to show that ±pE,£(GalQ) = / 3 E^£(Gal(Q); if not then there is an index 2 subgroup H 
of G or Nns{£) such that —I ^ H. The group H n Gns{(-) is then an index 2 or 6 subgroup of Gns{G) 
that does not contain —However, the cardinality of 77H Cns{G) is even, so it contains an element 
of order 2 which most be —7. 


Finally suppose that v^Je) < 0. 

There exists an element g G with v^q) = —ve{jE) > 0 such that 


iE = (l + 240^ . »V/(1 - ^"P/hn >,( 1 - 9 ")“) 
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Let £/Q_i, be the Tate curve associated to q, cf. [Sil94, V§3]; it is an elliptic curve with j-invariant 
jE and the group £{Qi) is isomorphic to / {q) as a GalQ^-module. In particular, the Gtorsion 
subgroup £[l] is isomorphic as an F£[Gal(Q^]-module to the subgroup of /{q) generated by an 
Gth root of unity C and a chosen Gth root q^/^ of q. Let a: GuIq^ —)■ and /3: GalQ^ —>■ F^ be the 
maps defined so that f7(C) = and (j{q^/^) = So with respect to the basis {C,,q^^^} 

for £[i], we have ps,(.{o') = ^ ^ GalQ^. The curves E and £ are quadratic twists of 

each other over (the curve E is non-CM since its j-invariant is not an integer). So there is a 
character y: GalQ^ —{±1} such that, after an appropriate choice of basis for E[i], we have 

for all a € Galjj^. Since a is surjective, we find that the image of /?E^£(GalQ) in PGL 2 (F£) contains 
a cyclic group of order l — \. However, the image of Nns{(.) in PGL 2 (F£) has order + 1). Since 
PeA^^^q) — ^ns{.£)i 'w® that 1 — 1 divides 2 {£ + 1 ); this is impossible since gcd(.£ — 1 ,.^ + 1 ) = 2 

and I > 17. 
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